Return of Reckoning

Close all server ports, build up named VPN session for players via ISP service. Than DDOSers would be ISP pain )

Managing and paying for thousands of VPN connections is not an option.

Disable the automatic login feature and add a CAPTCHA?

I do not know much about networks and protecting them but I am assuming a DDOS attack "needs" an auto log in feature to work. I know CAPTCHA's are a pain in the squig but you can be sure that no DDOSer is going to sit there and do them.

DDoSers don't login. They normally just spam the IP adress (the hardware that can be reached first) with all kinds of requests; the hardware has to decide (time/computing power) which ones are legit and which ones are not legit.
If there are too many requests happening at the same time, the hardware can't handle it anymore (distributed denial of service).
There are lot's of different ways to execute these attacks though.

The solution is simple - spend an assload of money on bandwith, hardware and ddos protection.
If it was possible it would've happened already.

machopi1 wrote:The solution is simple - spend an assload of money on bandwith, hardware and ddos protection.
If it was possible it would've happened already.

well still its an ongoing war and internets ressources for ddosing are way cheaper/cost nothing and are practically unlimited as they use peoples infected pcs to ddos.

My point exactly - the only way to mitigate the ddos is to throw dump trucks of money at it, and even then that probably won't solve nearly as much as it's needed.
So it ain't happening.

Isn't cloudflare providing ddos protection?

Cloudflare is absolute dogshit against massed and organized attacks. I mean, it does decent against a salty, basement dwelling neckbeard greaseball with a buttmad boner for the server, but nothing more. And we're getting it hard from way, WAY more.

Build a Wall