I am the old Lu, dry ten years of hand tour back-end, last month just experienced a nightmare: the new tour public test on the third day was 650G UDP flood + CC attack mixed doubles, the server directly lay flat 12 hours. The boss fell in the conference room tea cups, operation girl hiding in the toilet crying, I led the team to test three mainstream game shield SDK within a week. today said a little truth, by the way, to help you avoid pit.
I. StoneCDN: the king of lightweight, small cost of God
protectionThe actual test to carry 300G UDP attack does not collapse, but more than 350G on the gasping breath. Its dynamic diversion is indeed cattle, attack traffic is split to the global node cleaning, business traffic directly connected to the server, the player is completely senseless.
Performance loss: Memory pressed to 20MB or less, low-end machine frame rate fluctuations ± 3 frames or so, OPPO A series of thousand yuan machine tested smooth chicken.
Integration speed: Unity plugin import is done in 10 minutes, API is just 3 core functions, even interns can get started.
Dark pit warning: The protection cap is stuck to death, and when SLG opens a 10,000-man national war and gets pierced by 380G, the players are collectively stuck as PPTs.
Second, CDN5 Game Shield (fast network): the first choice of technical flow, the defense is ruthless but adjusted to the bitter
buffet-proof (soccer)The 510G UDP flood +870,000/sec CC attacks are fully prevented, relying on the "traffic coloring" black technology - 3 seconds to lock the attack source IP automatic isolation, hackers can not even touch the attack logs.
Acceleration is awesome.: After integrating the QUIC protocol, Southeast Asian player Ping values dropped from 186ms to 62ms, and next day retention went up by 14%.
frame rate metaphysics: There's nothing wrong with officially blowing CPU occupancy ≤ 2%, but the frame rate occasionally plummeted from 60fps to 42fps on the Huawei Mate40, which was later found to be a conflict between the asynchronous loading module and the Kirin chip.
reality TV spiel: The documentation is written like Morse code! Tuning an encrypted tunnel took us two days, so we recommend that newbies bring their own decoders (in the physical sense).
Third, CDN07 game shield (Modu cloud): tycoon exclusive, expensive has the reason for expensive
network ceilingThe backbone network of Telecom/Link/Mobile is directly connected to the network, and the delay of the whole country is within 50ms, and the players have no sense of disconnecting and reconnecting to the network.
The traceability is wild enough: Relying on equipment fingerprints to locate the physical location of the hacker, with the Internet police report terminated two attack gangs, server cabinets are given to them Yang.
Price Assassin: 30K/month for Basic looks pretty, but want log analysis? Add money for MOS service! Want permanent storage? Then add DataV! Monthly invisible bill to shell out an additional eight thousand.
reality TV spiel: The defense effect can't be faulted, but the customer service pushes the add-on service every day, so be careful if you are thin-skinned.
IV. Guide to preventing pitfalls: money should be spent on the knife's edge
- Frame rate stability depends on asynchronous loading
Some guy blew "0 frame rate impact" and measured that the phone was hot enough to fry an egg after opening the encrypted tunnel on the OPPO Reno. Later changed toDynamic degradation of encryption strength-- Use light encryption for weak attacks, cut AES-256 for strong attacks, and the frame rate stabilizes immediately. - The key to preventing CC attacks is in the protocol
CDN5's "one machine, one secret" dynamic key makes the cost of hacking skyrocket: when unencrypted, Wireshark can easily forge protocol packets, and when encrypted, the cost of attacking doubles by 20 times. - Movement control capacity makes the difference between life and death
CDN07'sClient-level scheduling in secondsIt's the real deal: a certain attack in 4 seconds cut the port 3 times, the player is completely senseless. And a small factory SDK switching delay of 12 seconds, directly leading to 10,000 people offline.
V. Selecting programs with eyes closed: by team genetics
- Independent small groups choose StoneCDN: Lightweight and frugal, but take a low to mid-range machine and pressure test it before going live!
- Team of tech geeks picks CDN5: Playing around with complex configurations, QUIC acceleration is a real warning.
- Global service tycoon choose CDN07: 8-line BGP + accurate traceability, suitable for large factories that are not poor.
We ended up on CDN5+CDN07 double backup, the cost from the traditional high defense of 100,000 / month cut to 42,000. Now the most healing thing is to receive alert SMS in the early hours of the morning: "430Gbps attacks have been intercepted, and players are online without any abnormality".
storm theory (math.): Game security is essentially cost gaming. When the hacker found to hit you to use triple broiler still easy to be caught, naturally go to find a soft persimmon - and good game shield, is to make you into iron persimmon that nucleus.