Welcome Mastodon to Fast Forward!
Tags: community, fediverse, mastodon, fastforward
Published: 2023-02-22 21:48:41

We’re thrilled to announce that [Mastodon](https://joinmastodon.org/) is now a member of Fast Forward.

We believe things are better when they’re a little closer to you — when you have a say over your data, your safety, and your community. If we’ve learned anything over the past few years, we’re stronger when we stay connected.

## Welcome Mastodon to Fast Forward
We are super excited about this project because of what Mastodon represents — not only the power of community but also [the power to build communities](https://blog.joinmastodon.org/2017/02/the-power-to-build-communities/), to own and control your data, to leave a digital space, and take your data and your friends with you when and wherever you go. Helping a project like Mastodon is why we have a program like [Fast Forward](https://www.fastly.com/blog/fast-forward-lets-build-the-good-internet-together) in the first place — it truly delivers on the promise of the open web that drew so many people to ActivityPub and the fediverse.

In some ways, the motivation that led [Eugen Rochko](https://mastodon.social/@Gargron) to [create Mastodon](https://blog.joinmastodon.org/2018/06/why-activitypub-is-the-future/) is similar to [what led our founders to create Fastly](https://www.fastly.com/blog/fastly-looks-back-10-years-of-fond-memories#in-the-beginning). They found something about the internet that was broken, so they set out to build something that would fix it. And the community that Eugen has helped lead around Mastodon has succeeded beyond anyone’s wildest imagination.

At Fastly, we can help the open web thrive by providing scale and security. And we can help an open-source project whose biggest challenge is being available for, and welcoming to, everyone around the world who wants to take advantage of this new platform.

## How we’re helping
Mastodon was created long before the most recent news cycle, but it has certainly seen people joining at a much faster rate over the last few months. That means more people hitting the joinmastodon.org domain, more activity throughout each 24-hr cycle, and more load on the mastodon.social and mastodon.online instances. 

The increased attention has been both positive and negative. On January 31st, Mastodon and its flagship instances were hit by a significant [DDoS attack](https://www.fastly.com/learning/what-is-a-ddos-attack).

![a toot: Eugen Rochko
@Gargron@mastodon.social, "mastodon.social, mastodon.online and joinmastodon.org were hit by a DDoS yesterday, thankfully joinmastodon.org was already behind Fastly so it didn't have any impact on it. We've now moved mastodon.online behind Fastly and will do the same with mastodon.social soon."](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/fr299hp7w6j167xbttgg.png)

To understand the magnitude of such an attack, we generated a graph representing the relative trend between average traffic to joinmastodon.org and the requests per second (RPS) during the attack. 

![A graph representing the traffic differential between normal operations and during the DDoS attack.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/rgptojl0esb8xg49j3tc.png)

What’s more, application-layer ([Layer 7](https://en.wikipedia.org/wiki/Application_layer) of the [OSI Model](https://en.wikipedia.org/wiki/OSI_model#:~:text=Medium%20access%20control%20(MAC)%20layer,error%20checking%20and%20frame%20synchronization.)) DDoS attacks like those directed at Mastodon are typically very short-lived, meaning it was difficult for the Mastodon team to react in the moment. Right now, the team administering the mastodon.social and mastodon.online instances, as well as the rest of Mastodon’s infrastructure, such as joinmastodon.org, consists of Eugen, [Renaud Chaput](https://oisaur.com/@renchap), and the excellent community of contributors, sponsors, and instance admins that support the nonprofit. (By the way — Mastodon is hiring a full-time [DevOps Engineer](https://jobs.ashbyhq.com/mastodon/290fd40f-125e-41fc-942d-f4ce59e6bda2).) 

![Discord conversation between Mastodon maintainers. Elfurbe: anything you could map into a fail2ban filter? Might be good enough if it's not a sophisticated attack. Gargron: yeah, I am adding some IPs to a firewall filter manually. rrgeorge@raphus.social: seems possible.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/59x6m8bow7kkoouc4ksx.png)

And while that might work for one-off attacks or uninspired hackers, anyone persistent enough can easily switch tactics to get by those quick fixes.

![discord conversation between maintainers. Gargron: oh no, it's started again. chendo@mastodon.social: If it's just the one IP, I'd just add a firewall rule to drop that IP. Gargron: this time, hitting `get /explore` 11 times from the same IP, but it's many different IPs. No it's not just one IP sadly.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ecqpejdgvpzhlpcjof57.png)

Fastly absorbed the attack on joinmastodon.org — we’ve got automation to respond to such attacks. Given our place as a frontline operator sitting between systems and the people that use them, we’re constantly [monitoring the threat landscape](https://www.fastly.com/blog/evolving-ddos-landscape), [evolving our defense and mitigation stance](https://www.fastly.com/blog/ddos-attacks-how-protect-mitigate), and, what’s more, [empathizing with victims](https://www.fastly.com/blog/5-emotional-stages-ddos-attack). While DDoS attacks continue to grow larger and faster, the [industry’s ability to respond is growing](https://www.fastly.com/blog/ddos-attacks-grow-bigger-but-so-do-responses) even faster still.

We’re glad to be able to protect Mastodon and to be an option for anyone else who wants to scale and protect their community with integrity (see our [trust](https://www.fastly.com/trust) and [community](https://www.fastly.com/fast-forward#customer-community-policy) policies).

We’re also mindful of not wanting to centralize the infrastructure of a social network that is **decentralized by design**. Mastodon can easily migrate to another CDN or a multi-CDN approach. Put simply, we’re handling the network — delivering and securing content — so Mastodon can handle the stuff that matters most to them — encouraging healthy communities with effective community management and brilliantly creative participants. Because we believe…

## The future is federated
Mastodon is a growing project and community, and they need help. We already mentioned that they’re hiring a [DevOps Engineer](https://jobs.ashbyhq.com/mastodon/290fd40f-125e-41fc-942d-f4ce59e6bda2). They’re hiring a [Software Engineer](https://jobs.ashbyhq.com/mastodon/c2397ccf-025a-47fc-b03e-9f728d6c2522) and a [Product Designer](https://jobs.ashbyhq.com/mastodon/95f7d19d-bd20-470c-ab56-fb2c8816442f) too. You can also join the [community discussion](https://github.com/mastodon/mastodon/discussions), [suggest a feature](https://joinmastodon.org/roadmap) for their roadmap, and [get set up to contribute](https://docs.joinmastodon.org/dev/overview/) to the codebase. 

And Mastodon is one platform within a world — a fediverse? — of projects, platforms, clients, and apps built to intercommunicate. It’s a whole [fediverse.party](fediverse.party)! We can’t wait to see all the new and innovative stuff that’s yet to come.

Speaking of, are you building for the fediverse? We want to support you! We’re already supporting some incredible projects building for the new web (I can’t wait to tell you about them in the coming weeks!), and we want to support you too. If you need help scaling your project, apply to Fast Forward [here](https://fastly.com/forward). Or if you want us to signal boost your project, need advice, or want to show us what you’re building, reach out to us on fedi! 

- [@haubles@fosstodon.org](https://fosstodon.org/@haubles)
- [@glitchdotcom@mastodon.social](https://mastodon.social/@glitchdotcom)

We can’t wait to see what you’re working on! Now let’s go build the good internet — together. ⏩