I shared a link from NPR Tiny Desk but there was no image preview or video embed. After investigating this I learned that when you do that, each instance picks up the link and individually retrieves the link preview nearly simultaneously. For gargantuan sites like YT or Reddit, this is a trivial amount of traffic and not a problem, but for smaller sites like NPR this results in a sort of botnet DDOS attack on the site’s servers. More here. Another example here . For that reason, NPR has blocked Fediverse servers like Mastodon.

I have experienced this on my personal server as well (DDOS), but at the time didn’t know why, exactly.

This isn’t the end of the world, but certainly is not great and hurts engagement with the content. Is there a solution for this? Perhaps using some sort of webtorrent service like PeerTube where they just fetch the information from another fediverse server instead of the source server? Maybe fetching embeds client-side? At least that would stagger the requests.

  • Funkt4st1c@lemmy.world
    link
    fedilink
    English
    arrow-up
    36
    ·
    1 day ago

    Yeah, thats how it should be: one download, everyone else downloads from that server, not the original source.

    Seems abusable though

    • _haha_oh_wow_@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      1
      ·
      20 hours ago

      It is, but that’s what defederation is for: If there are instances that are being sketchy, they are supposed to get cut off from the rest of the Fediverse.

    • Gibibit@lemmy.world
      link
      fedilink
      English
      arrow-up
      27
      arrow-down
      4
      ·
      24 hours ago

      Seems abusable though

      If one instance doesn’t trust another, they shouldn’t federate in the first place.

    • a4ng3l@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 day ago

      Add metadata with a checksum of the og one with signature and let each client check that up.

      • inzen@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        22 hours ago

        If it’s a signed checksum then maybe. But if the og instance is doing the abusing then it won’t help.

        • a4ng3l@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          22 hours ago

          Yeah there must be some trust indeed of the og instance. A scoring system could help with that.

          • prenatal_confusion@feddit.org
            link
            fedilink
            English
            arrow-up
            1
            ·
            20 hours ago

            Or … Or we could stagger the requests of the different instances so that they don’t overload the linked site. Why reinvent the wheel?

            • a4ng3l@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              19 hours ago

              Eventually that leaves the load to the source event if it’s differed. And the load would still grow along the growth of the fediverse. So this would likely be pushing the issue to tomorrow. Signing content checksum isn’t exactly like reinventing a wheel, it’s something done in many contexts. And it removes the load from the source entirely.