For people using HTTP requests to tell if a server is protected
Roblox will use a range of IPs in these IP range to send httprequest, instead of the ip used to connect to the game server: Amsterdam: 128.116.121.* Los Angeles: 128.116.116.* Miami: 128.116.45.* Singapore: 128.116.50.* Sydney: 128.116.51.* Dallas: 128.116.95.* Seattle/Portland: 128.116.115.*
How to identify a protected server
Open the log file, if the server is unprotected there would be a line stating
â[FLog::Output] Connecting to x.x.x.x:[Port]â
If the server is protected, it would state something along the lines of
â[FLog::Output] Connecting to UDMUX server x.x.x.x:[Port], and RCC server 10.x.x.x:[Port]â
Many roblox developers have been reporting DDoS attacks on their game, many can agree ddos has been a big issue, especially towards smaller games, and including session based games.
If your game have been experiencing unexplained lag (after checking for backdoors and vulnerabilities), ask for someone who is near the stated location to create servers and see if it helps.
IP of the game server are public information and can be found by pressing ctrl+shift+f3, in logs and even without joining the game at all and using gamejoin API.
Roblox just purchases servers & deploys their software on those servers, this âprotectionâ isnât apart of the roblox software, itâs apart of the server regulations, itâs a bonus, an addition I guess you could say.
Also people try to actually make bots & services to generate servers in these ranges & locations
Itâs chaos
Roblox no longer purchase dedicated servers, they moved fully onto colocation in 2020, udmux is likely a hardware upgrade, that is slowly rolling out.
After observing 2 weeks of Venti crashing, I have observed that when a LA server spawn, the attack pauses and ashburn server is made, resulting in players being sent there and LA server shutting down, when that happens attack continues, I have also tried to spawn Netherlands server, when that happens same thing but london server is used
Oh? Good to know, is there a source to go with this as well so I can have a quick real about it? And yeah, the âHardware Upgradeâ is what I mean by the server regulations
Regarding server downtime & crashing, yeah I am sorry for that, there are some really low players on roblox who for some reason feel it is important to commit a crime on a games platform
I tried once to counter a DDoS and the most I could do was detect it, then post that message off to a discord/guilded webhook. (this is through Lua, no other applications involved.)
for Venti, it is what I observed, for the servers, there are many articles including techcrunch published how roblox completely changed its tech stack which shows that roblox moved from cloud computing provider to own datacenters
For the hardware upgrade, not confirmed or anything but what is used is likely NAT, and a new switch providing hardware ddos mitigation. the switch is extremely expensive.
Itâs likely the whitelist is strictly forcing datacenter 232 (the netherlands server) on your game, meaning if the netherlands server is down, it will try to form server on the specified datacenter but is unable to, I recommend contacting whoever gave you the whitelist for a timeline on how long the downtime will likely last, and creating a duplicate of the game to temporarily get rid of the whitelist
Is there a way to create servers that have only those IPs? I own a small game, having 1-3 servers is quite ideal and it would be even better if they were protected
You could, but someone need to create the server manually with vpn and check it manually, I donât think there is an api to do it but I might be wrong
I just realized - Iâve kind of just been taking it at face value based off this post, but how do we know UDMUX servers actually have DDoS protection? I know the Roblox gamejoin endpoint gives an internal 10.x.x.x IP address when joining a game, which the game client then resolves a âUDMUX addressâ for to connect to. But how do we know anything more than that? I canât find much other information on this.
