Jerry 🦙💝🦙Dec 16, 2022
Now at 1700 new accounts on the day @infosec.exchange. This is what it looks like on the load balancer:
Show threadJerry 🦙💝🦙Dec 16, 2022
And this is what's happening at the CDN:
Show threadJerry 🦙💝🦙Dec 16, 2022
And this is what the aggregate CPU on the PUMA servers look like (note, almost no change)
Show threadJerry 🦙💝🦙Dec 16, 2022
And this is the aggregate load on the sidekiq servers (also, nearly no change)
Show threadJerry 🦙💝🦙Dec 16, 2022
Transaction growth on the postgresql database:
Show threadVissDec 16, 2022
@jerry whoa those are some really interesting spikes. can you tell what they are?
Show threadJerry 🦙💝🦙
@Viss Not really. I have neglected to instrument the basic linux stats on the load balancer. That is simply queries that nginx is responding to, so I assume that it is probably related to something that causes lots of other instances to hit the server all at once, like a large account mentioning something here.
Dec 16, 2022 at 11:44pmWeb
Show threadVissDec 16, 2022
@jerry interesting. yeah cuz the 'average load' looks to be considerably less than those spikes, so something is causing.. i guess a shitload of queries to happen all at once, in bursts?
Show threadJerry 🦙💝🦙Dec 16, 2022
@Viss exactly. If someone on an instance with followers on thousands of different instances posts a link that references this site, all those instances reach out. This is what the attack of last week was all about - creating many accounts that caused instances to attempt to DDOS some other sites.
Show threadVissDec 16, 2022
@jerry ah ha - illumnation of burst-style DDOS scenarios. too many signups spike psql, psql chokes, front end throws 500s
Show threadthroAUDec 17, 2022
@Viss @jerry probably every time Elon posts on twitter. Lol.
Show threadVissDec 17, 2022
@throAU @jerry well, banning journalists and letting nazis on the site were two big spikes, for sure