Starting at about 5:45 PM EST we began to have site issues. I quickly identified that our servers's CPU load was enormous and began to rule out common issues. When I could not identify any configuration problems, I enabled Cloudflare's DDoS buffer and the load returned to normal. After some quick investigation, I disabled this and load quickly spiked again within a few minutes. It is from this that I conclude it was a deliberate attack and not an increase in traffic or unusual traffic.
During the time between a return to high traffic and re-enabling the buffer, I did some tests and did not see any significant spike in page requests. This typically indicates the problem is some sort of flood. The Cloudflare buffer seems to mitigate it successfully.
During the time between a return to high traffic and re-enabling the buffer, I did some tests and did not see any significant spike in page requests. This typically indicates the problem is some sort of flood. The Cloudflare buffer seems to mitigate it successfully.