This morning, I went to the City Science and Technology Museum to play, and by the time I got home, it was already one o'clock in the afternoon. The videos taken at the museum are not very convenient to upload here. After lunch, I went to sleep, and when I woke up, it was already four in the afternoon. I just woke up and grabbed my phone to check, only to find that I had received four text messages from Tencent Cloud, realizing that I was hit by a DDoS attack this afternoon at three o'clock.
The attack started at 3:06 in the afternoon, lasted for nearly three minutes, and ended at 3:09. The peak traffic of the attack was about 3Gbps, with a total traffic of around 1G, which doesn't seem too large. However, because the peak traffic of the attack exceeded the protection threshold, the server's IP was blocked.
This attack caused the server to be inaccessible until just now at eight o'clock. Fortunately, there is a cache from Upyun, which made the entire afternoon's website and blog services available. Now the CDN cache has been set to a global 45 days, and static image cache to 365 days, which can reduce the dynamic requests on the CDN side and ensure that the service can still be available in situations like today. Due to some characteristics of the blog, the cache time can only be set to one day. When trying to lift the block just now, I purchased Tencent's high-defense IP, which was very affordable.
I briefly checked the attacking IPs, and the vast majority are from within the country. Tomorrow, I plan to see if I can say something about it (since it's almost Chinese New Year, they probably won't take action).
Chinese New Year is coming tomorrow, so I wish the attackers a happy New Year, and wish everyone happiness, smooth work, progress in studies, and success in their careers.
while($year == 2023) {
beHappy(); //Always be happy in the new year
}