What Happens When Your Eco Server Is Attacked

An Eco server has a game port for the client and a web interface that players and admins use in a browser. Both are protected by VibeSHIELD, the anycast DDoS protection network included with every VibeGAMES server. This article explains what VibeSHIELD filters for Eco, what you will see during an attack and how to respond.

1What VibeSHIELD Does for Your Eco Server

• A TCP game filter protects the game port TCP 3000. It drops traffic that does not look like a real Eco client.
• An HTTP filter protects the web interface port 3001, so a flood aimed at the browser interface is stopped before it reaches the server.
• Filtering happens at the VibeSHIELD point of presence nearest to the source of the traffic, across 46 locations worldwide. Only clean traffic continues to your server.
• The protection is included and always active. There is nothing to configure.

2What Players Notice

• In most attacks nothing. The economy keeps running.
• During very large attacks players may see a few seconds of higher ping or packet loss while filtering ramps up.
• If the server or the web interface is unreachable, check the console in the game panel first. A crash, running out of memory, a broken mod or a wrong port are more likely than the attack.

3Where to See the Attack

• Log in to the website dashboard and open your Eco server.
• Click the DDoS protection tab. This tab is in the website dashboard at vibegames.com, not in the game panel at game.vibegames.com.
• Status reads Active. Attack status reads Not under attack or Under attack.
• The Attack history table shows the attacks of the last 30 days with an ID, the peak size in Mbps or Gbps, and the start and stop time.
• Expand a row for the breakdown: a traffic chart over time, source countries, source networks (ASN), source ports, destination ports, protocol, TTL and packet sizes.

4The Email You Receive

• Your account email receives a message with the subject DDoS attack detected on your server <ip> when an attack targets your server's port.
• It confirms VibeSHIELD is filtering the traffic and that no action is needed.
• The IP address is shared by several servers on the node, each with its own port. The attack is matched to your server by the attacked port.

5What to Do

• Nothing is required for the attack itself.
• Do not share your server IP with anyone who threatens you, and never pay anyone who claims they can stop an attack.
• Leave the game port and web port as they are. Changing them does not help against attacks.
• A move to another location is not needed. All locations are behind VibeSHIELD.
• If players report problems during an attack, open a ticket and include the attack ID from the history table.

Good to Know

• The web interface has its own filter. Port 3001 is covered by an HTTP filter, so the browser side of Eco is protected separately from the game port.
• Destination ports show the target. The breakdown of an attack tells you whether the game port or the web port was hit.
• Read more. See how VibeSHIELD protects your game server for the full article.