{"id":275,"date":"2015-08-18T23:32:26","date_gmt":"2015-08-18T15:32:26","guid":{"rendered":"https:\/\/woohuiren.me\/blog\/?p=275"},"modified":"2015-08-18T23:42:45","modified_gmt":"2015-08-18T15:42:45","slug":"ipv6-ddos-is-now-a-threat","status":"publish","type":"post","link":"https:\/\/woohuiren.me\/blog\/ipv6-ddos-is-now-a-threat\/","title":{"rendered":"IPv6 DDoS is now a threat"},"content":{"rendered":"

Distributed Denial of Service (DDoS) has always been a major threat to organisations’ networks. DDoS attacks are cheap and easy to carry out but defending against these kind of attacks can cost 100 to 1000 times more than the cost of launching an attack. Before I stopped hosting Team Fortress 2 game servers, my IPv4 address has always been under constant DDoS. Every few days, I would receive billion of packets per second floods, bringing down my Internet for a few hours. It was such an annoyance to both my ISP and I; the attacker won and I stopped hosting the Team Fortress 2 game servers.<\/p>\n

\"ddos-attack\"<\/a><\/p>\n

However, attacks has always been constrained to IPv4 as implementation of IPv6 was lacking globally. When IPv4 addresses started becoming dry a few years back, lots of ISPs started implementing CGNAT but most of them still didn’t bother with implementing IPv6. <\/p>\n

\"CGNAT\"<\/a><\/p>\n

As time passes by, and NICs of different regions become drier in IPv4 addresses, ISPs worldwide started to become aware of IPv4 exhaustion. Then, they slowly and finally moved their ass to implementing IPv6 addresses. It’s not super difficult to do it, they’re just lazy. Okay granted, maybe it is difficult for such a large scale process to happen quickly in bureaucratic ISPs but seriously, if your company did not see the shortage of IPv4 addresses becoming real 5 years ago, I’ve got real bad news for ya. <\/p>\n

\"ipv4-exhaustion\"<\/a><\/p>\n

In 2014 and 2015, my friend kcaj, has already suffered from 2 IPv6 DDoS attacks. These attacks were originating from trolls in the Efnet #troll channel. Folks from there seem to love to DDoS each other for “fun”, very childish anti social behaviour. Attacks originating from this channel is strong enough to take down OVH DDoS protected boxes and heck, even Voxility boxes. These script kiddies’ parents sure are rich enough to fund their kids with booter credits to wreck havoc on the Internet. I frown upon such action and desperately urge everyone not to carry out these attacks just for the sake of “fun”. Sure, it might sound “fun” but wait until you get hit by these attacks or worse still, get arrested for such actions. <\/p>\n

\"2015-08-18_23-13-41\"<\/a><\/p>\n

So as you can see, DDoS using IPv6 network is now a threat. DDoS protection providers should start offering protection that covers these kind of attacks. Just a thought and question for you, is your company prepared to face against IPv6 DDoS attacks? If so, which DDoS protection provider are you using?<\/p>\n","protected":false},"excerpt":{"rendered":"

Distributed Denial of Service (DDoS) has always been a major threat to organisations’ networks. DDoS attacks are cheap and easy to carry out but defending against these kind of attacks can cost 100 to 1000 times more than the cost of launching an attack. Before I stopped hosting Team Fortress 2 game servers, my IPv4 … Continue reading “IPv6 DDoS is now a threat”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":278,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[71,2,3],"tags":[76,78,77,79],"class_list":["post-275","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-industry","category-information-technology","category-it-security","tag-ddos","tag-ddos-attack","tag-ipv6","tag-ipv6-ddos-attacks"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/woohuiren.me\/blog\/wp-content\/uploads\/2015\/08\/2015-08-18_23-13-41.png?fit=1166%2C454&ssl=1","_links":{"self":[{"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/posts\/275"}],"collection":[{"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/comments?post=275"}],"version-history":[{"count":4,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions"}],"predecessor-version":[{"id":282,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions\/282"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/media\/278"}],"wp:attachment":[{"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/media?parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/categories?post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/woohuiren.me\/blog\/wp-json\/wp\/v2\/tags?post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}