How to deal with DDos attack?

[AlexFung]

What can I do?

[nhl.pl]

It doesn't look like a DDoS.
https://github.com/NodeBB/NodeBB/issues/3949

[AlexFung]

@nhl.pl I can't access my forum for about 3 hours
The pageviews keep increasing... and unique visitors are dropping..
503
This forum is temporarily unavailable due to excessive load.
We shouldn't be down for long. Please check back shortly. Sorry for the inconvenience!

[yariplus]

Are you self-hosting this?

If it's actually a denial of service attack, your host should handle it for you.

[AlexFung]

@yariplus I use the plan provided by NodeBB

[Kowlin]

@AlexFung Best you can do then is contact the guys from NodeBB then. cugh @administrators

[AlexFung]

@Kowlin OK, I think this is the only way I can do

[psychobunny]

@AlexFung we're looking into it - next time feel free to send us a direct email at [email protected], thanks!

[AlexFung]

@psychobunny thank you for your help !!!

[bitspook]

strange... i got that same message yesterday on a dev environment hosted on digital Ocean. I was the only one on when it happened. The numbers were not abnormal.

[pichalite]

@bitspook did you get the message right after a reboot or restart?

[bitspook]

yikes, i do not recall now. if i remember correctly i was just changing some admin settings in custom html.

[pichalite]

@bitspook OK. just asking coz you will see the same 503 "Excessive load" page when you reload/restart NodeBB and refresh the page before the reload/restart is fully complete.

[bitspook]

Very well could be. I hadnt seen the screen before then.

[jongarrison]

@pichalite I've only ever seen 502 'bad gateway' in a restart scenario. Can you think of a reason why your system would show a 503?

[pichalite]

@jongarrison Not sure why. I have a test installation running on c9. Some times after a ./nodebb restart, when I refresh the page I get 503.

[frissdiegurke]

@jongarrison You should get 502 if you turn off NodeBB completely during restart (kill process, restart then) and nginx points to closed port in the meantime. If you however use NodeBB internal functions of restart/reload you're supposed to get a neat 503 page instead

[pichalite]

@frissdiegurke It's a neat 503 page but don't think the "Excessive Load" message is appropriate during restart/reload.

[yariplus]

Would it be possible for NodeBB to just wait before sending a response? NodeBB startup doesn't take that long.

[jongarrison]

@frissdiegurke Interesting