You can now buy flood protection from your carrier, so a DDoS is scrubbed before it reaches your lines. Multi-AZ customers also stop running two copies of every VM.
Added
Flood protection
- A new Flood protection page is listed under Internet. It shows the capacity you are protecting, what is being scrubbed right now, what still reaches your lines, and the plans your site can buy.
- Garages and basements can buy a Proxy plan for $20 a month. It scrubs a flood of any size before it reaches your line.
- Colocation and campus sites buy Transit in Base, Advanced or Premium. Every tier scrubs a flood of any size. A better tier lets less through to your firewall and adds less delay to your traffic.
- Transit is priced on the lines you have bought, plus the clean traffic you receive. The fee steps up as your lines pass 25, 50, 100 Gbps and beyond; the page shows the next step.
- A little of every flood still gets through. It is a small share of each zone's line, never enough to fill it, and your gateway firewall, add-ons and security appliances handle it.
- The plan ends when you move site. You buy protection again at the new site, and the move page reminds you.
Changed
- Small sites no longer get smaller floods. The size limit on attacks against single-zone sites is gone, so an unprotected site takes the full flood.
- Multi-AZ and Replicated customers run the VMs they ask for. A customer asking for 13 VMs now runs 13, not 26, spread across zones or hosts. Their bill and prospect card estimate drop to match.
- Workloads split evenly across zones. Placement now fills the zone holding the fewest of a customer's workloads, then spreads that zone's share across hosts, so splits like 20 and 6 no longer happen.
Fixed
- The switch traffic chart shows all the traffic the switch carries. Traffic between two servers on one switch charted at half its rate, and the chart now matches the port table under it.
- Rebalancing no longer leaves a workload stuck when a free host exists. A worker stayed put with "Needs 17 separate zones" while another zone had a host with room, and now it moves.
- Spread warnings no longer ask for one zone per workload. Workloads share zones evenly, so a stuck move now names what blocks it instead of asking for more zones than your site has.
- A line on its own router no longer shows as standby. With two routers holding one line each, both lines carry traffic, and both now show as active.
- The uplink policy setting is disabled when it changes nothing. Backup line and Use both at once only differ on a router with two or more lines, and the setting now tells you so.
- A stuck move now says why. "Server X stuck (no_target)" told you nothing; the toast now names the real reason, like no other server has enough memory or no other zone has room.
Notes
- Saves load both ways. A v0.1.68 save loads without a flood protection plan.
- Load once to heal. Multi-AZ and Replicated customers lose their extra VM copies on load, starting from the fullest zone. Their other VMs keep running.
- Version lock. The game and a dedicated server must both be on v0.1.69.
- New snapshot fields. Flood protection adds a section with the offered plans, and attack data adds a per-zone split of what was aimed, scrubbed and arrived.
- Switch totals changed meaning. `total_egress_gbps` and `total_ingress_gbps` are now the sum of the switch's own port rows, so server-to-server traffic reads at full rate instead of half.