Context
This is a livestream segment by
Null, the founder and administrator of Kiwi Farms, discussing a significant DDoS attack that recently affected the site. The discussion serves both as a technical postmortem and a fundraising/business discussion about the site's future infrastructure.
What Happened
- Null explains that Kiwi Farms experienced a major DDoS attack that disrupted most of its public-facing infrastructure.
- He says the site ultimately remained accessible primarily through its Tor onion service after conventional access paths were overwhelmed.
- According to Null, the attack ceased because the attacker stopped rather than because Kiwi Farms successfully defeated it.
Technical Explanation
- Null walks viewers through Kiwi Farms' hosting architecture, which uses multiple providers and geographically distributed servers.
- He argues that the design intentionally limits trust between systems so that compromise of a front-end node would not expose the core site.
- During the attack:
- Smaller servers and VPS instances reportedly became overloaded.
- Traffic shifted toward the remaining servers.
- One larger server handled most of the remaining traffic until the provider blackholed it to protect its network.
- Null cites a reported peak of roughly 165 Gbps of attack traffic.
Criticism of Providers
- Null criticizes several infrastructure and DDoS-protection providers.
- He expresses frustration with providers he believes offer inadequate protection or have policies that prevent Kiwi Farms from using their services.
- He also accuses specific individuals associated with parts of the industry of misconduct and claims this has affected Kiwi Farms' ability to obtain protection services.
Proposed Solution: "Kiwi Flare"
- A major theme of the stream is Null's proposal to build an independent DDoS-mitigation network, jokingly referred to as "Kiwi Flare" (a reference to Cloudflare).
- The idea would be to create infrastructure capable of filtering attacks without relying on third-party providers that might refuse service or prove unreliable.
- He presents rough estimates for bandwidth, hardware, networking equipment, and data-center costs.
Funding Discussion
- Null estimates that operating such a system could cost roughly $10,000–$15,000 per month, potentially much more if attacks grow larger.
- He discusses several ways to finance it:
- Donations from supporters.
- Selling DDoS-mitigation services.
- Running a VPN service.
- Merchandise or other side businesses.
- Partnerships with technically skilled collaborators.
Audience Appeal
- The latter portion functions partly as a recruitment and fundraising pitch.
- Null invites people with networking, infrastructure, and security expertise to contact him if they are interested in helping develop the proposed mitigation service.
Main Takeaway
Viewed in context, the transcript is less a neutral explanation of a cyberattack and more a strategic update from Kiwi Farms' owner. Null uses the attack as evidence for why he believes the site needs greater infrastructure independence and then explores the technical, financial, and organizational challenges of building a self-operated DDoS-mitigation network.