[UPDATE – 1:07AM EST 9/20/2014] No solution was able to be provided by our ISP in Dallas, TX regarding the Layer 7 filtering. We have initiated emergency maintenance in Dallas, TX to remove Layer 7 filtered IP addresses and we are assigning new IP addresses to customers on these IP addresses. Please check your GameCP (Overseer Panel) to see your new IP address.
If you are a customer of ours in Dallas, TX or you were planning to move your services there you may want to read this. We will most likely be changing and/or completely removing the Layer 7 filtering for our DDoS protection in Dallas, TX. Some of the recent scrubbing changes made by our up-stream provider has started causing wide spread connectivity issues to all services in the location. The basic DDoS protection will still be in place but this change, if it does happen, will require all of our customers using the DDoS protected IP addresses to be moved to a new IP address as the routing for the current IP’s cannot be modified from their current state.
To put this in more simple terms to explain what is going on we can break it down like this; We currently run multiple services in our Dallas, TX location. The basic DDoS protection filters out most TCP traffic but game servers and voice servers like TeamSpeak 3 use UDP to allow users to connect. The Layer 7 protection is too aggressive against UDP connections and that is what is causing connectivity loss and service drops.
When we implemented Layer 7 advanced DDoS protection everything was working perfectly for some time and all of the filtering was allowing legitimate traffic through while at the same time blocking attacking IP addresses. In its current state, the advanced filtering is now way too aggressive and it needs to be scaled back some as it has continually been blocking legitimate traffic. If you are in our Dallas, TX location you understand our frustration as you constantly get dropped from your services and cannot FTP into your server files. This is totally unacceptable in our eyes.
We have already been hounding our up-stream provider in Dallas, TX to provide us with a solution to these filtering problems for the last few days and they have not been able to provide us with any sort of solution thus far. This unfortunately is why we are letting you, the customer, know what is going on and what we are doing to provide an alternative. The worst case scenario is that we move everyone in Dallas, TX to new IP addresses under the basic DDoS protection with Layer 3 and 4 filtering instead of Layer 7. Our ISP in Dallas, TX has also agreed to block specific ports that will not leave customers’ services vulnerable to attack if we need to take this route.
If you have any further questions or concerns regarding this situation please let us know by submitting a support ticket and we will do our best to work with you. We hope we can find a solution to these issues within the next few days. If no solution to the filtering issues is found we will move forward with our plan to lower the advanced filtering settings to level 3 or 4 and distribute new IP addresses to everyone in Dallas, TX.
TL;DR DDoS protection in Dallas is having issues and we are working to provide an alternative solution. Possible that all customers in Dallas, TX will be migrated off current DDoS protected network to new, less aggressive, protected network. Submit a ticket with any questions.