# DoS Attacks against our Online Game

DevFeed: [DoS Attacks against our Online Game](<https://devfeed.tech/articles/dos-attacks-against-our-online-game-30813.md>)

Original publisher: [Read original article](<https://hookrace.net/blog/dos-attacks-against-online-game/>)

Published: 2021-09-26T22:00:00Z

Content type: article

Language: en

Sources: [Dennis Felsing](<https://devfeed.tech/sources/dennis-felsing.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [servers](<https://devfeed.tech/topics/servers.md>), [Latency](<https://devfeed.tech/topics/latency.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [hosting](<https://devfeed.tech/topics/hosting.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [Database](<https://devfeed.tech/topics/database.md>), [MySQL](<https://devfeed.tech/topics/mysql.md>), [SQLite](<https://devfeed.tech/topics/sqlite.md>), [Rust](<https://devfeed.tech/topics/rust.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [database](<https://devfeed.tech/tags/database.md>), [hosting](<https://devfeed.tech/tags/hosting.md>), [latency](<https://devfeed.tech/tags/latency.md>), [mysql](<https://devfeed.tech/tags/mysql.md>), [network](<https://devfeed.tech/tags/network.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [rust](<https://devfeed.tech/tags/rust.md>), [server](<https://devfeed.tech/tags/server.md>), [servers](<https://devfeed.tech/tags/servers.md>), [sqlite](<https://devfeed.tech/tags/sqlite.md>)

## AI overview

The article describes recurring DoS attacks against DDNet, an open-source online game, and their effects on geographically distributed game servers and a community tournament. It outlines the attack types, hosting problems, and measures including a secret database address, local SQLite fallback, and Cloudflare-protected web components.

## Source excerpt

DDraceNetwork is an open source online game I've been running since 2013 with a community of volunteers. The game is available for free, I'm hosting servers for it in many countries around the world so that we have trusted official ranks. The servers are paid for by donations, which I stop collecting once the cost of the servers for the current year is covered. I wrote about DDNet in a previous post in 2016 and also a bit about the game history in 2013. Pretty much since the beginning we have been suffering from DoS attacks against the servers. Since the Steam release in 2020 the player number has increased significantly, so that we have about 1300 players playing on average. Based on the rising player number the urge to deal with the DoS problem is larger than ever. A few months ago for example we organized a Tournament for everyone in the community to participate. Unfortunately the event was the continuous target of DoS attacks for multiple hours, with players fleeing from one server to the next, trying to find a safe refuge. These bandwidth graphs for our servers in Netherlands and Germany respectively illustrate the problem: Since DDNet only runs online and you feel every small network latency it is predestined as a target for DoS attacks. Outside of attacks our servers don't need to be particularly powerful for regular gameplay, 1 CPU core can support 150 players concurrently, memory consumption is minimal. So the total we are paying for our ~23 servers around the world is only ~2300 EUR  for the year 2021. What we have tried The kinds of attacks we receive are varied. There are generic reflection and amplification attacks, as well as spoofed game specific attacks of considerable strength. Some hosters have thrown us out following attacks impacting their other customers, and most hosters will blackhole our IP address for multiple hours before it gets to that. There is even a Wireshark dissector for DDNet/Teeworlds available, written in Rust: Some components of our