• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: July 25th, 2023

help-circle

  • Here are some basic definitions:

    Instance: a Lemmy server with its collection of local users and local communities

    Federation: allowing users of one instance the ability to participate and interact with the content and users of another instance

    Defederation: “blocking” an entire instance and its users from participating and interacting with the content and users of another instance.

    Every instance maintains a publicly visible “instances” list where you can see which instances are allowed/federated (listed as “Linked Instances” and which other instances are disallowed/defederated (listed as “Blocked Instances”. That list is always at the same predictable URL for every instance ( https://[instance]/instances ). For Lemmy.World, that list would be at https://lemmy.world/instances.

    Instances operators also have the ability to surgically block specific users or specific communities from other instances. This doesn’t mean they have ‘defederated’, it just means they have blocked a specific use or instance. These are considered moderation activities and show up in an instance’s moderation log (also called the “modlog”). Every instance’s modlog is public and visible at the predictable URL of https://[instance]/modlog. For Lemmy.World, the modlog would be at https://lemmy.world/modlog. The modlog has a “filter by action” dropdown making it easy to find certain types of moderation activities. If you search the modlog for “removing communities” you can see the communities that an instance has removed or blocked.

    In the case of the piracy communities, they were removed from Lemmy.world, but federation still exists between Lemmy.world and the other instances where those blocked communities still exist.







  • By claiming that the problem isn’t DDOS, you’re just advertising your ignorance. Cloudflair is outstanding for protecting static web content against DDOS, and Lemmy.world is well protected against that. The problem is certain dynamic pages and api calls that can only be rendered from costly realtime dynamic database operations…those are the url that the DDOS attackers are focusing on and those are the kinds of content that cannot be easily protected by cloudflair.

    Your premise, though, is still accidently correct. The way to mitigate instances being targeted by DDOS is to spread the user base and community hosting across a vast number of instances so that no one instance is such a rewarding target for DDOS attack.