Problems with DDoS attacks

[OpenSource03]

Hello there!

While under DDoS, the website is consuming 100% of 4 core Ryzen 7 VPS, while only about 10Mbit is bypassing. Is there anyone with a solution on how to solve it? I've tried multiple PHP-FPM configurations, but never managed to get any result.

[OpenSource03]

[Slitzo3]

I don't think it's a DDOS attack. Just someone overloading your webserver. So just block the ip where it's coming from.

[OpenSource03]

It is. Anonboot stress test. I performed it myself to demonstrate the effect of it.

[schrej]

Can you check you webserver access logs and see which endpoints they are calling? If it's actually very little traffic, it might be some kind of DoS vulnerability in the panel.

I also don't see redis or memcached, do you have caching set up? That probably helps a lot with performance.

[OpenSource03]

Most usually it is GET /auth/login. The problem is that laravel is always calling MySQL on every single request adding a row or updating session table rows. It is producing tremendous load on php and MySQL from what I can see? Also, would you mind explaining how to enable such caching mechanics?

Thanks!

[OpenSource03]

Figured it out. Thanks, it really helped a lot!

[OpenSource03]

SOLUTION FOR ANYONE WITH SIMILAR PROBLEMS

1. Execute sudo apt-get install php7.4-memcached
2. Go to your Pterodactyl folder and execute php artisan p:environment:setup
3. Configure your session driver and cache driver as memcached