Everything posted by Cpvr
-
CodyCool Has Arrived!!
Hey! [mention=119]CodyCool[/mention] welcome to Administrata!!
-
Meta plans to build a $10B subsea cable spanning the world, sources say
Meta, the parent of Facebook, Instagram, and WhatsApp, is the second-biggest driver of internet usage globally. Its properties — and their billions of users — account for 10% of all fixed and 22% of all mobile traffic. Meta’s investments into artificial intelligence stand to boost that usage even further. So to make sure it will have reliable infrastructure to support that business, Meta is taking the pipes into its own hands. TechCrunch has confirmed with sources close to the company that Meta plans to build a new, major, fibre-optic subsea cable extending around the world — a 40,000+ kilometer project that could total more than $10 billion of investment. Critically, Meta will be the sole owner and user of this subsea cable — a first for the company and thus representing a milestone for its infrastructure efforts. Sunil Tagare, a subsea cable expert (and pioneer in the space, as founder of Flag Telecom), who was the first to report Meta’s plans back in October, told TechCrunch that the plan is to start with a budget of $2 billion but as the project builds out that figure is likely to go up to more than $10 billion as the project extends into years of work. Sources close to Meta confirmed the project but said it is still in its early stages. Plans have been laid out, but physical assets have not, and they declined to discuss budget. The expectation is that Meta will talk more publicly about it in early 2025, when it will confirm plans for the cable, including intended route, capacity, and some of the reasoning behind building it. It would be years before it is fully operational, were the strategy to be followed through, given that the limited number of companies, like SubCom, that are capable of building out the infrastructure already have large customers, like Google, reserving its services. “There’s a real tight supply on cable ships,” said Ranulf Scarborough, a submarine cable industry analyst. “They’re expensive at the minute and booked out several years ahead. Finding the available resources to do it soon is a challenge.” One likely scenario could involve building in segments, he added. The cable, when completed, would give Meta a dedicated pipe for data traffic around the world. The planned route of the cable, says sources, currently sees it spanning from the east coast of the U.S. to India via South Africa, and then to the west coast of the U.S. from India via Australia — making a “W” shape around the globe, as visualized here by Tagare: Meta’s infrastructure work is overseen by Santosh Janardhan, who is the company’s head of global infrastructure and co-head of engineering. The company has teams globally who look at and plan out its infrastructure — and it has had some significant industry figures work for it in the past. In the case of this upcoming project, it is being conceived out of the company’s South Africa operation, according to sources. Fiber-optic subsea cables have been a part of communications infrastructure for the last 40 years. What’s significant here is who is putting the money down to build and own it — and for what purposes. Meta’s plans underscore how investment and ownership of subsea networks has shifted in recent years from consortiums involving telecoms carriers, to now also include big tech giants. Meta is not new to the subsea game. According to telecom analysts Telegeography, Meta is part-owner of 16 existing networks, including most recently the 2Africa cable that encircles the continent (others in that project are carriers including Orange, Vodafone, China Mobile, Bayobab/MTN and more). However, this new cable project would be the first wholly owned by Meta itself. That would put Meta into the same category as Google, which has involvement in some 33 different routes, including a few regional efforts in which it is the sole owner, per Telegeography’s tracking. Other big tech companies that are either part owners or capacity buyers in subsea cables include Amazon and Microsoft (neither of which are whole-owners of any route themselves). [HEADING=1]Why Meta wants its own cable[/HEADING] There are a number of reasons why building subsea cables would appeal to big tech companies like Meta. First, sole ownership of the route and cable would give Meta first dibs in capacity to support traffic on its own properties. According to its earnings reports, Meta makes more money outside of North America than in its home market itself. Having priority on dedicated subsea cabling can help ensure quality of service on that traffic. (Note: this is just to ensure long-haul traffic: the company still has to negotiate with carriers within countries and in ‘last-mile’ delivery to users’ devices, which can have its challenges.) Meta, like Google, also plays up the lift it has provided to regions by way of its subsea investments, claimingthat projects like Marea in Europe and others in Southeast Asia have contributed more than “half a trillion dollars” to economies in those areas. Yet there is a more pragmatic impetus for these investments: tech companies — rather than telecoms carriers, traditional builders and owners of these cables — want to have more direct ownership of the pipes needed to deliver content, advertising and more to users around the world. “They make their money from their products being presented to end users, and they will do everything they can to ensure customer experience, whether that’s delivery of video or other assets,” said Scarborough, the analyst. “Frankly, who’s going to rely on traditional telcos anymore? Tech companies are now independent. They’ve realized they’ve got to build it themselves.” The second is geopolitical. Several times in recent years, subsea cables have been taken down as collateral or direct damage from warfare. Houthi fighters, backed by Iran, are going after boats and in the process are damaging cables in the Red Sea (such as this one connecting Europe to India). This month (November 2024), Russia was suspected of cutting a submarine cable in the Baltic Sea. Just this week, another cable went down in European waters, with a Chinese shipcurrently getting the blame. The route as envisioned by Meta is intended to help the company “avoid areas of geopolitical tension,” a source close to the company told TechCrunch. Tagare points out in his blog post that the route would avoid the Red Sea, the South China Sea, Egypt, Marseilles, the Straits of Malacca and Singapore — “all of whom are now major single points of failure.” The FCC’s announcement this month (November 2024) that it plans to review submarine cable licensing for the first time in decades, partly due to national security and ownership of the cables, could potentially also figure as another fillip here: Meta would be the sole owner of a route through safe corridors. There is a possible third reason for Meta’s subsea vision, although it’s more speculative. According to a theory of Tagare’s, it is directly related to the cable terminating in India. He believes that Meta has an opportunity to build out data center capacity in the country specifically for training and working with AI models, and the subsea cable could play a role in that effort. He points out that India’s cost for compute bandwidth is a fraction of the price in the U.S., and many in India have been buzzing after a recent visit by Jensen Huang: in a meeting with Reliance chairman Mukesh Ambani, the Nvidia CEO talked about India building its own AI infrastructure. Reliance, among other vendors, will be using Nvidia’s Blackwell chips in future AI data centers. “India could become the training capital of the world,” Tagare said in an interview. He believes that Meta might well want to build AI training in the country around that infrastructure. AI is a big part of Meta’s infrastructure roadmap. But beyond that, India is a huge market for Meta, topping estimates as the country with the most users by far on Facebook (more than 375 million users), Instagram (363 million), and WhatsApp (536 million) and those consumers are proving to be very enthusiast for newer features like its AI tools. With robust investments being made into the data center market in the country, India still has a lot of growth potential, so this fact alone makes it logical to have added India as a landing point in the operation. Sources close to the project tell us that it’s too soon to say whether AI is part of the equation for Meta in this project, describing it as part of the “long tail” of considerations and possibilities, along with whether Meta would open capacity to other users alongside itself. Meta declined to comment for this article. Source: https://techcrunch.com/2024/11/29/meta-plans-to-build-a-10b-subsea-cable-spanning-the-world-sources-say/
-
Nodebb: Have you used this software?
I’ve recently been come across NodeBB, a modern forum platform built with Node.js. It offers a sleek, responsive design and a ton of features like real-time notifications, plugin support, and integration with third-party services. From what I’ve seen so far, it seems like a solid choice for building a community. I’m curious to hear your thoughts! • Have you used NodeBB before? • What do you think of its performance and ease of use? • Are there any standout features or challenges you’ve encountered? If you’re running or moderating a forum on NodeBB, feel free to share your experiences or tips. There’s a demo that you can check out here: https://try.nodebb.org/ Their pricing is as followed: [HEADING=1]Hamlet[/HEADING] [HEADING=1]$100/Month[/HEADING] [HEADING=1]USD[/HEADING] New startups and personal groups Up to 500,000 monthly page views 20 GB storage Standard email support, plus community forum support [HEADING=1]Village[/HEADING] [HEADING=1]$250/Month[/HEADING] [HEADING=1]USD[/HEADING] Small startups, businesses, and groups Up to 2 million monthly page views 100 GB storage Standard email support, plus community forum support [HEADING=1]City[/HEADING] [HEADING=1]$750/Month[/HEADING] [HEADING=1][/HEADING]
-
Building a Strong Team Culture in Online Communities
Creating a thriving, positive team culture within an online community is one of the most powerful ways to foster long-term engagement, collaboration, and success. Whether you’re running a gaming group, a business-focused forum, or a hobbyist community, a strong culture can transform your space from just another digital gathering place into a tight-knit, supportive team. But how do you cultivate that sense of unity and belonging in a world where members might be spread across different time zones, backgrounds, and even continents? Let’s dive into some key strategies that can help you build a healthy, productive, and welcoming team culture for your online community. 1. Define Your Community’s Values and Vision Every great team is built on a foundation of shared values and goals. The first step in building a strong community culture is to establish clear values and a vision that everyone can rally behind. What do you want your community to stand for? What’s the bigger picture, and how does each member contribute to it? By defining your community’s purpose—whether it’s a passion for gaming, a drive for personal growth, or a commitment to a cause—you give members something meaningful to connect with. This shared sense of purpose will help team members feel like they’re part of something bigger than themselves. Pro Tip: Make sure your community values are visible and accessible. Whether it’s through a pinned post, a community guidelines page, or regular reminders in discussions, keep the vision front and center. 2. Foster Open, Transparent Communication Effective communication is the cornerstone of any successful team culture. In an online community, where face-to-face interactions aren’t possible, creating an open and transparent communication environment is even more critical. Encourage honest conversations, ask for feedback, and ensure everyone feels comfortable sharing their thoughts. It’s essential that every member feels heard and valued—whether they’re a newbie or a seasoned member. Regularly check in with the group, host Q&A sessions, and make sure that the leadership team is approachable. Pro Tip: Tools like polls, open feedback channels, or “ask me anything” threads can help promote transparency and give everyone a voice. 3. Embrace Inclusivity and Mutual Respect One of the greatest benefits of online communities is the diversity they bring. However, diversity also requires extra effort in creating an inclusive and respectful environment. How can you ensure that everyone feels valued, regardless of their background, experience level, or opinions? Set the tone from the start: encourage positive interactions, educate members about the importance of inclusivity, and be proactive in addressing disrespectful behavior. Build a culture where differences are celebrated and every member feels welcome, whether they’re participating actively or just lurking. Pro Tip: Establish clear community guidelines around behavior and regularly remind members about the importance of respect. Ensure that moderators are equipped to step in when necessary. 4. Recognize and Reward Contributions In any team, recognition goes a long way. People who feel appreciated are more likely to stay engaged and contribute. In an online community, where members may not have the same face-to-face connection as a physical team, rewards and recognition are essential in building a sense of accomplishment and pride. Acknowledge active members, whether they’re providing helpful advice, organizing events, or just participating in daily conversations. Use public shout-outs, badges, or even reward systems like “Member of the Month” to show appreciation. Pro Tip: Make recognition meaningful and specific. Instead of just saying “thank you,” highlight exactly how the member’s contribution made a difference to the community. 5. Promote Collaboration and Teamwork Online communities often start with individuals doing their own thing, but the real magic happens when members come together to collaborate. Encouraging teamwork and joint efforts can strengthen your culture and create a sense of collective achievement. Host community challenges, group discussions, or collaborative projects. Find ways to connect people with similar interests or skills so they can work together. The goal is to make sure no one feels isolated and that there’s always an opportunity for teamwork. Pro Tip: Set up collaborative tools like project boards, group chats, or shared documents that make it easy for members to collaborate. 6. Handle Conflicts with Empathy and Constructive Solutions Disagreements are bound to happen, especially in a community of diverse individuals. The key to maintaining a strong team culture is how you handle conflict. A healthy community addresses issues head-on with empathy and respect, focusing on solutions rather than blame. Instead of letting problems fester, encourage open dialogue where members can express their concerns and work toward a resolution together. By approaching conflicts with patience and understanding, you’ll help your community grow stronger rather than break apart. Pro Tip: Train your moderators to handle disputes calmly and fairly, and create a clear process for reporting issues. 7. Make It Fun and Engaging A positive culture isn’t just about hard work—it’s about having fun together. Create opportunities for members to bond, whether through social events, casual conversations, or shared hobbies. Fun challenges, game nights, or themed discussion threads can make the community feel less like a “workplace” and more like a supportive space where everyone can enjoy themselves. Pro Tip: Use community polls to gather ideas from members about fun activities they’d like to see—this increases engagement and makes them feel part of the decision-making process. At the heart of every successful online community is its people. When you focus on creating a strong, inclusive, and supportive culture, you’ll build a space where members feel motivated to engage, collaborate, and thrive. By fostering respect, encouraging teamwork, and making the experience enjoyable, you can transform your online community into a place that members want to return to again and again. What are your best tips for building a strong team culture in online communities? Share your experiences, ideas, or challenges below—we’d love to hear your thoughts!
-
Closed Vs. Open Community
Open vs. Closed Communities: Which is Right for You? When it comes to building a community, the first key decision is whether it should be open (public) or closed (private). This guide will help you make an informed choice based on your goals and audience. As someone passionate about community building, I firmly believe every online business should foster a community around its brand. Over the years, I’ve explored the pros and cons of both open and closed communities—here’s what I’ve learned. Understanding Open Communities An open community makes its content publicly accessible. Users can browse content without logging in, but typically need to create an account to engage, such as liking, commenting, or posting. Examples of Open Communities: Reddit, Quora, public Facebook Groups, and traditional forums are classic examples. You can explore content without signing up, making them easy to discover and join. Advantages of Open Communities: 1. Exponential Growth: SEO-friendly, driving organic traffic. 2. Broader Reach: Content visibility enhances brand awareness. 3. SEO Benefits: User-generated content boosts search rankings. 4. Network Effect: Larger audiences lead to richer discussions. 5. Lower Marketing Costs: Public visibility reduces advertising spend. 6. Free Promotion: Discussions often get shared on social media. 7. Easy Onboarding: Low entry barriers encourage participation. 8. Growth Driver: Open communities double as marketing engines. Disadvantages of Open Communities: 1. Spam Risk: Both bots and human spammers can be an issue. 2. Moderation Challenges: Larger communities require more oversight. 3. Privacy Concerns: Public content may deter sensitive discussions. 4. Content Quality Issues: Ensuring relevance and accuracy can be tough. 5. Security Risks: Public data is vulnerable to scraping and misuse. 6. Limited Trust: Anonymity can hinder meaningful connections. 7. Misinformation: Open platforms are prone to spreading false information. With proper tools like moderation systems and spam filters, these drawbacks can be managed effectively. Understanding Closed Communities Closed communities, on the other hand, restrict access to their content. Users must log in, receive an invitation, or pay for membership to participate. Examples of Closed Communities: Slack, Discord, WhatsApp groups, private Facebook or LinkedIn groups. Advantages of Closed Communities: 1. Controlled Membership: Owners can vet and select participants. 2. Enhanced Privacy: Content stays within a trusted group. 3. Focused Content: Discussions tend to stay relevant and high-quality. 4. Reduced Noise: Smaller, more engaged audiences create less clutter. 5. Monetization: Easier to implement paid memberships or premium content. 6. Professional Environment: Members often behave more professionally. Disadvantages of Closed Communities: 1. Limited Growth: Restricted access means slower member acquisition. 2. No SEO Benefits: Hidden content doesn’t attract organic traffic. 3. High Maintenance: Keeping members engaged is labor-intensive. 4. Lower Discoverability: Harder for new users to find and join. 5. Monotony Risk: Smaller communities may lack diverse perspectives. 6. Operational Costs: Requires dedicated management resources. 7. Not Marketing-Friendly: Closed setups don’t support brand visibility. Open vs. Closed: Which Should You Choose? For most online businesses, an open community is the better choice. Open communities drive organic growth, enhance brand visibility, and reduce marketing costs. They’re ideal for businesses that want to showcase user-generated content (UGC) and leverage it for SEO benefits. However, there are cases where a closed community makes sense. If privacy, exclusivity, or monetization through memberships is a priority—like for course creators or premium groups—a closed setup might be more suitable. In the end, the decision depends on your goals. If growth, visibility, and accessibility are top priorities, go open. If privacy, control, or monetization matter more, go closed. Choose wisely, and let your community become a powerful asset for your brand.
-
Golden Content Package
I’ve completed my part.
-
How much longer can Facebook stay relevant?
Facebook doesn’t know how to innovate anymore lmao. They’re known for copying ideas and stealing other companies concepts. They’re doing the same thing now with their Threads app.🤣
-
Community Chat Thread
Good evening ya’ll! Happy Thanksgiving!
-
What are you listening to?
I’m currently listening to On go by Lil loonie. [MEDIA=spotify]track:5pQrNaKcmKBd1C1MdVWnzB[/MEDIA]
-
Hi? I'm new
Welcome to the community! How are you doing today? Happy Thanksgiving
-
Golden Content Package
Taking the first slot
-
Hello everyone!
Hey [mention=13]Phillip[/mention] welcome to Agora!
-
Wordpress VS WP Engine
[HEADING=2]WP Engine Vs Automattic: Judge Inclined To Grant Preliminary Injunction[/HEADING] WP Engine's attorney on Mullenweg's $32M demand: "That's not how you calculate a royalty. That's how you set a ransom." Judge indicates she's leaning toward granting "some sort of injunction." Attorneys have until Tuesday, December 3, to present "dueling submissions," which will determine how the judge will rule. https://www.searchenginejournal.com/wp-engine-vs-automattic-judge-inclined-to-grant-preliminary-injunction/533746/
-
What are you listening to?
I’m currently listening to Switched up by Morray. [MEDIA=spotify]track:0zAxe63ZJGboujUs92LFrm[/MEDIA]
-
What are you listening to?
I’m currently listening to Blame yourself by 92Legend. [MEDIA=spotify]track:5vFLPwh696EJyDNEDXnrTz[/MEDIA]
-
What was the last tv show that you watched?
I need to rewatch it again. It’s been a while since I watched it. It’s a pretty good show! I’d say it’s one of the best series Apple TV has released this year. There will be a second season too, so I’m looking forward to watching it when it’s released!
-
What are you listening to?
I’m currently listening to Legacy by Lil Tjay. [MEDIA=spotify]track:0kZLYZ9qpZrQYedUMI7s58[/MEDIA]
-
What are you listening to?
I’m currently listening to Beat the odds by Lil tjay. [MEDIA=spotify]track:2BJWxD8xKrDv8vneTvTIm9[/MEDIA]
-
Is it a good idea to request posting packages?
Yes, it’s a good idea to request a posting package while your board is offline and being built. That way, when you’re ready to open, your forum will be seeded with content rather than being empty. This allows you to hit the ground running, with more content available for new members, as opposed to having limited content when you first launch. A posting package is designed to help you by providing the resources you need to kickstart your forum.
-
Google Rolls Out Search Console Recommendations
In August, Google introduced Google Search Console recommendations but it slowly rolled it out to more and more users over time. Now, Google has fully rolled it out and if Google has Search Console recommendations for your sites, then Google will show it on the home page of the dashboard. Google wrote on linkedin and X, "We're happy to let you know that Recommendations are now available to everyone! Note that you'll see them only if we have a recommendation available for your website." Again, this does not mean you will see the Google Search Console recommendations. Google just might not have recommendations. I checked several Google Search Console properties and only saw recommendations for a couple of them. Here is what I see for this site: Here is a different one: Google explained when it first was announced that, even "after complete rollout, we'll only provide recommendations when we have a recommendation available for your website," Google added. Google said these are the types of recommendations you might see: Issues (something that could be fixed) Opportunities (something that could improve your traffic) Configuration (something that could make your work easier) The recommendations "can help you prioritize your search optimization efforts, such as using structured data to help Google understand your content, adding sitemaps, and checking out trending queries and pages," Google wrote. Source: https://www.seroundtable.com/google-search-console-recommendations-live-38479.html
-
Bigger and badder: how DDoS attack sizes have evolved over the last decade
DDoS) attacks are cyberattacks that aim to overwhelm and disrupt online services, making them inaccessible to users. By leveraging a network of distributed devices, DDoS attacks flood the target system with excessive requests, consuming its bandwidth or exhausting compute resources to the point of failure. These attacks can be highly effective against unprotected sites and relatively inexpensive for attackers to launch. Despite being one of the oldest types of attacks, DDoS attacks remain a constant threat, often targeting well-known or high traffic websites, services, or critical infrastructure. Cloudflare has mitigated over 14.5 million DDoS attacks since the start of 2024 — an average of 2,200 DDoS attacks per hour. (Our DDoS Threat Report for Q3 2024 contains additional related statistics). If we look at the metrics associated with large attacks mitigated in the last 10 years, does the graph show a steady increase in an exponential curve that keeps getting steeper, especially over the last few years, or is it closer to linear growth? We found that the growth is not linear, but rather is exponential, with the slope dependent on the metric we are looking at. Why is this question interesting? Simple. The answer to it provides valuable insights into the evolving strategies of attackers, the sophistication of their tools, and the readiness of defense mechanisms. As an example, an upward curve of the number of requests per second (rps) suggests that the attackers are changing something on their side that enables them to generate larger volumes of requests. This is an insight that prompts us to investigate more and look at other data to understand if anything new is happening. For instance, at one of those moments, we looked at the source of the traffic and saw a shift from subscriber/enterprise IP address space (suggesting IoT) to cloud provider IP address space (suggesting VMs), and realized there was a shift in the type and capabilities of devices used by attackers. As another example: when the HTTP/2 Rapid Reset attack happened, the record number of requests per second seen at that time suggested that a new technique was being employed by attackers, prompting us to swiftly investigate what was being executed and adapt our defenses. [HEADING=1]Defining individual attacks[/HEADING] Delimiting an individual attack in time is surprisingly blurry. First of all, an attack analysis can provide inconsistent observations at different layers of the OSI model. The footprint seen at all these different layers may tell different stories for the same attack. There are, however, some variables that together can allow us to create a fingerprint and enable us to group a set of events, establishing that they are part of the same individual attack. Examples include: Do we see the same attack vector(s) being used across this set of events? Are all the attack events focused on the same target(s)? Do the payloads on events share the same signature? (Specific data payloads or request types unique to certain types of attacks or botnets, like Mirai, which may use distinctive HTTP request headers or packet structures). [HEADING=1]DDoS attack sizes [/HEADING] Before we dive into a growth analysis of DDoS attacks over the last 10 years, let's take a step back and have a look at the metrics typically used to measure them: requests per second (rps), packets per second (pps), and bits per second (bps). Each metric captures a different aspect of the attack's scale and impact. Requests per second (rps): Measures the number of HTTP or similar protocol requests made each second. This metric is particularly relevant for application-layer attacks (Layer 7), where the intent is to overwhelm a specific application or service by overloading its request handling, and is useful for measuring attacks targeting web servers, APIs, or applications because it reflects the volume of requests, not just raw data transfer. Packets per second (pps):Represents the number of individual packets sent to the target per second, regardless of their size. This metric is critical for network-layer attacks (Layers 3 and 4), where the goal is to overwhelm network infrastructure by exceeding its packet-processing capacity. pps measurements are useful for volumetric attacks, identifying a quantity of packets that can impact routers, switches, or firewalls. Bits per second (bps): This measures the total data transferred per second and is especially useful in evaluating network-layer attacks that aim to saturate the bandwidth of the target or its upstream provider. bps is widely used measuring Layer 3 and 4 attacks, such as UDP floods, where the attack intends to clog network bandwidth. This metric is often highlighted for DDoS attacks because high bps values (often measured in gigabits or terabits) signal bandwidth saturation, which is a common goal of large-scale DDoS campaigns. [HEADING=1]Evolution of DDoS attack sizes over the last decade[/HEADING] So, how have DDoS attack sizes changed in the last decade? During this period, DDoS attacks have grown bigger and stronger, each year having the potential to be more disruptive. If we look at the metrics associated with large attacks seen in the last 10 years, does it look like we have a steady increase in an exponential curve that keeps steepening, especially in the last few years, or is it closer to a linear growth? We found that it is exponential, so let’s have a look at the details around why we came to that conclusion. In this analysis, we used attacks that Google has seen from 2010 until 2022 as a baseline (Figure 1) that we extended with attacks that Cloudflare has seen in 2023 and 2024 (Figure 2). Going back in time, early in the 2010s, the largest attacks were measured in the Gigabits per second (Gbps) scale, but these days, it’s all about Terabits per second (Tbps). The number of requests per second (rps) and bits per second (bps) are also significantly higher these days, as we will see. The historical data from Google shown below in Figure 1 reveals a rising trend in requests per second during DDoS attacks observed between 2010 and 2022, peaking at 6 Million requests per second (Mrps) in 2020. The increase highlights a significant escalation in attack volume across the decade. Figure 1. Largest known DDoS attacks, 2010 - 2022. (Source: Google) Figure 2 (below) provides a view of trends seen across the different metrics. The escalation seen in Google’s statistics is also visible in Cloudflare’s data regarding large mitigated DDoS attacks observed in 2023 and 2024, reaching 201 Mrps (green line) in September 2024. The rate of packets per second (pps) demonstrates (blue line) a slight exponential growth over time, rising from 230 Mpps in 2015 to 2,100 Mpps in 2024, suggesting that attackers are achieving higher throughput. For bits per second (bps), the trend is also exponential and with a steeper upwards curve (red line), building from a 309 Gbps attack in 2013 to a 5.6 Tbps (5,600 Gbps) attack in 2024. Over roughly the last decade, attacks driving these metrics have seen significant growth rates: Bits per second increased by 20x between 2013 and 2024 Packets per second increased by 10x between 2015 and 2024 Requests per second increased by 70x between 2014 and 2024 Figure 2. Data from Figure 1 extended with large attacks observed by Cloudflare in 2023 and 2024. The blog posts listed in Table 1 highlight some of the attacks that we observed from 2021 to 2024. Month Attack size Blog post August 2021 17.2 Mrps Cloudflare thwarts 17.2M rps DDoS attack — the largest ever reported April 2022 15 Mrps Cloudflare blocks 15M rps HTTPS DDoS attack June 2022 26 Mrps Cloudflare mitigates 26 million request per second DDoS attack February 2023 71 Mrps Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack September 2024 3.8 Tbps How Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack October 2024 4.2 Tbps 4.2 Tbps of bad packets and a whole lot more: Cloudflare's Q3 DDoS report October 2024 5.6 Tbps 5.6 Tbps attack Table 1. Notable DDoS attacks observed by Cloudflare between 2021 - 2024. An overview of other selected significant high volume DDoS attacks that have occurred over the last decade, including2018’s Memcached abuse and 2023’s HTTP/2 “Rapid Reset” attacks, can be found on the Cloudflare Learning Center. [HEADING=1]Attack duration as a metric[/HEADING] Attack duration is not an effective metric to use to qualify attack aggressiveness because establishing a duration of a single attack or campaign is challenging, due to their possible intermittent nature, the potential for a multitude of attack vectors being used at the same time, or how the different defense layers triggered over time. The attack patterns can differ considerably, with some consisting of a single large spike, while others featuring multiple tightly grouped spikes, or a continuous load maintained over a period of time, along with other changing characteristics. [HEADING=1]Trend in types of devices used to create attacks[/HEADING] DDoS attacks are increasingly shifting from IoT-based botnets to more powerful VM-based botnets. This change is primarily due to the higher computational and throughput capabilities of cloud-hosted virtual machines, which allow attackers to launch massive attacks with far fewer devices. This shift is facilitated by several factors: VM botnets can be easier to establish than IoT botnets, as they don’t necessarily require widespread malware infections, since attackers can deploy them on cloud provider infrastructure anonymously using stolen payment details from data breaches or Magecart attacks. This trend points to the evolution of DDoS tactics, as attackers exploit both the processing power of VMs and anonymized access to cloud resources, enabling smaller, more efficient botnets capable of launching large-scale attacks without the complexities involved in infecting and managing fleets of IoT devices. [HEADING=1]How does Cloudflare help protect against DDoS attacks?[/HEADING] Cloudflare's Connectivity Cloud, built on our expansive anycast global network, plays a crucial role in defending against DDoS attacks by leveraging automated detection, traffic distribution, and rapid response capabilities. Here’s how it strengthens DDoS protection: Automated attack detection and mitigation: Cloudflare’s DDoS protection relies heavily on automation, using machine learning algorithms to identify suspicious traffic patterns in real time. By automating the detection process, Cloudflare can quickly recognize and block DDoS attacks without requiring manual intervention, which is critical in high-volume attacks that would overwhelm human responders. Global traffic distribution with IP anycast: Cloudflare's network spans over 330 cities worldwide, and DDoS traffic gets distributed across our multiple data centers. IP anycast allows us to distribute traffic across this global network, and this wide distribution helps absorb and mitigate large-scale attacks, as attack traffic is not directed towards a single point, reducing strain on individual servers and networks. Layered defense: Cloudflare’s Connectivity Cloud offers defense across multiple layers, including network (Layer 3), transport (Layer 4), and application (Layer 7). This layered approach allows for tailored defense strategies depending on the attack type, ensuring that even complex, multi-layered attacks can be mitigated effectively. Learn more about DDoS protection at layers 3, 4, and 7 in our DDoS protection documentation. Unmetered DDoS mitigation: Pioneering this approach since 2017 to ensure Internet security, Cloudflare provides unmetered DDoS protection, meaning customers are protected without worrying about bandwidth or cost limitations during attacks. This approach helps ensure that businesses, regardless of size or budget, can benefit from robust DDoS protection. Cloudflare’s distributed cloud infrastructure and advanced technology allows us to detect, absorb, and mitigate DDoS attacks in a way that is both scalable and responsive, avoiding downtime and maintaining service reliability, providing a robust solution to tackle the rising intensity and frequency of DDoS attacks compared to traditional options. Protecting against DDoS attacks is essential for organizations of every size. Although humans initiate these attacks, they’re carried out by bots, so effective defense requires automated tools to counter bot-driven threats. Real-time detection and mitigation should be as automated as possible, since relying solely on human intervention puts defenders at a disadvantage as attackers adapt to new barriers and can change attack vectors, traffic behavior, payload signatures, among others, creating an unpredicted scenario and thus rendering some manual configurations useless. Cloudflare’s automated systems continuously identify and block DDoS attacks on behalf of our customers, enabling tailored protection that meets individual needs. Source: https://blog.cloudflare.com/bigger-and-badder-how-ddos-attack-sizes-have-evolved-over-the-last-decade
-
25 Threads for jCodes
I’ve completed my part.
-
What’s the best way to deal with negative behavior from members?
The best way to handle negative members is to approach them with kindness and understanding initially. Address their concerns calmly and give them a chance to adjust their behavior. However, if a member continues to spread negativity despite 2-3 warnings, it’s important to take decisive action to protect the community. At that point, removing them from the community might be the best option to maintain a positive and welcoming environment for everyone else.
-
Community Chat Thread
Good evening! How’s Everything going for you?
-
How did you grow your community when you first started it?
It’s always a great idea to seed your forum with content before advertising or doing post exchanges—that’s one of my mottos too! The best part of owning a community is watching it grow before your eyes, going from 5 members to 20, and then to 100. It’s such an amazing feeling—there’s nothing greater! Every effort we put into growing our forums eventually pays off. It takes time and dedication to promote, but it’s always worth it in the end!