Collateral damage [LWN.net]

Collateral damage

Posted Aug 31, 2026 22:40 UTC (Mon) by MarcB (subscriber, #101804)
In reply to: Collateral damage by pizza
Parent article: Ryabitsev: Creepy crawlies

> When the most pre-eminent/technically-capable org out there no longer cares enough to do things right, what hope is there for anyone else to do better?

Since I work for a company that offers cloud, VPS as well as shared hosting, I know both sides.

On the scraper side:
While the outgoing traffic of those systems is higher then usual, it is still far below anything that would allow you to suspend them. Even if you do get a complaint: Any action performed by any individual VPS against any individual target is legally speaking fine. Even the (stricter) ToS rarely apply.
To add insult to injury: They always use the lowest-margin servers and turn the margin negative because of their increased bandwidth (keep in mind: the hoster gets this double, because the scraped data has to go somewhere).
We eventually resolved this by dropping those offers. Now the smallest VPS costs three times as much and is significantly stronger in CPU and memory, which scrapers do not need.

On the scrapee side:
The initial waves of crawlers were worse than any DDoS attack we faced before (and we had some big ones...), mostly because they hit the application layer instead of just the network, but also because of the highly distributed targets and sources. This invalidated decades of experience in running a large, shared hosting platform. The load patterns and resource usage was unlike anything before. We had whole server rooms exceeding their power quotas and had to do frantic redistributions between data centres - even temporary shutdowns of non-essential systems - until we had things back under control.

Collateral damage

Posted Sep 1, 2026 14:12 UTC (Tue) by mbunkus (subscriber, #87248) [Link]

Fascinating to read about the problems the bigger hosters are facing; thank you for that! Is there a public, more in-depth write-up of something similar somewhere that you can recommend?

Collateral damage

Posted Sep 3, 2026 16:00 UTC (Thu) by JanC_ (subscriber, #34940) [Link]

Wouldn’t it be more customer-friendly to allow a small number of low-cost VPS per existing customer?

Maybe start with 1 or 2, and an option to ask Support to increase the allowance if they want more, where Support can look at history (new unknown customer vs. 20-year customer should count), and rate-limit how many extra ones they allow over time? (You can also try to automate it, but that might be easier to game…)

There are lots of people (especially also in the FLOSS community) who have “almost idle” VPS used for personal use or experimenting, where the larger VPS would be (too) expensive.