Frequent attacks on Hive Engine

For the past few weeks, there have been attacks on Hive Engine. I'm not sure if it is an intentional attack or someone writing a bad query to get some data. But it appears to be a bad actor because the same type of request is hitting Hive Engine from different IP addresses. We have had similar issues in the past too, and we have created so many improvements to mitigate these issues. Currently, again the issue is being investigated and if there can be a permanent solution for this, it will be implemented.

It is hard to find out who is doing the attack but we can only get the list of IP addresses doing this bad query to slow down the system. My nodes struggled a little bit because I have been operating some public nodes. For those who are operating public nodes, this can be a problem because the trafic hits the public node and it takes times to get executed. There are two ways in which this can be handled. One is through a firewall to prevent IP addresses from bombarding the API node with requests. Restrictions can be set in place.

Source

The other way to handle the issue is to work on the RPC node itself and have some filters and indexing in place so that it can handle bad query runners. Sometimes when people are bombarded with many requests or bigger request, even to reject the system can take some time. Block production or chain movement is not affected because of this issue however if a public node is very busy or at 100 percent utilization, block signing can also get affected because the response time to p2p node will be high.

We have come across many improvements to Hive Engine's core codebase, and I hope this also gets handled soon. Currently, the solution people are doing is to block the IP addresses that are troublesome and keeping the node behind cloudflare is also helpful because we can configure a few things there to handle DDoS attacks. Private nodes will not have any problems with this issue.

If you like what I'm doing on Hive, you can vote me as a witness with the links below.

Vote Hive account@balaz as a Hive Witness

Vote Hive account@kanibot as a Hive Engine Witness