URGENT -> Victim of DDOS attack



So I’m not too familiar with what happened here but it seems like Vercel was able to challenge and block about half of the requests. But still 263.4k was let through and that has exceeded my Invocations. Can this be resolved by Vercel? Also how can I prevent this from happening in the future. Based off my readings I can do rate limiting for that route, but this has downsides of say places where their are legitimate lots of users using one IP address. I also can block those individual IP addresses but I’m not really understanding how that would reliably prevent this from happening in the future as most likely I would get hit from some other IP addresses, right?

I’m also confused how my website is still online and seemingly everything is working despite the exceeding usage. It seems like my landing page and my app subdomain where my actual application is hosted both got attacked, but the landing page was able to block all the requests with the firewall. Any idea as to why that is?

It would be much appreciated if I was able to receive help from someone on the Vercel team. I actually do have paying users and really hope my site does not go down. Thanks in advance!

Hey @njackson6100-8791. If you haven’t already, please open a case with the support team so they can investigate this traffic with you :folded_hands:

1 Like

Is that only available for plan plan? I’m on that page and it’s directing me to visit the community page.

I apologize, Noah. I assumed you were on the Pro plan since you mentioned paying customers on your site.

If you haven’t used your Pro trial yet, that would temporarily bump up your limits

1 Like

lol the plurality in “paying customers” is quite literal, (2 paying customers :slightly_smiling_face: ) but thanks i’ll upgrade.

Just opened support case.

1 Like