staminus down?

Portal Home > Knowledgebase > Articles Database > staminus down?

Posted by bosen, 07-13-2005, 06:37 PM
staminus down? i cant ssh to the box and their web also lag badly Last edited by bosen; 07-13-2005 at 06:50 PM.
Posted by Justin, 07-13-2005, 07:32 PM
Hi bosen, First off welcome to WHT, and yes staminus is presently down both my servers there and also that of my clients are experiencing heavy packetloss. This is due aparently to a routing loop on routes inbound to their facility/network/pop. The above trace was done via one of my Georgia servers and was done a short while ago. As you can see where the routes should be reaching the staminus edge routers they are looping back to global crossing's borders/peers with nrs. xeex/nrs is one of staminus's transit uplink providers (one of their two gige lines other one is to abovenet). At this time awaiting further information from the datacenter as to what is occurring the lead admin is attempting to work on fixing/resolving this issue. Hope this information helps. -Justin
Posted by bosen, 07-13-2005, 07:50 PM
Thanks Justin for your quick reply, i just join to their chat room on efnet and the topic says Several GBPS ddos at > 1000 ips at a time. Hope admin will take care this soon...
Posted by Justin, 07-13-2005, 07:56 PM
That is an update since the last one. I doubt that though alone would have caused such outage unless their auto null router has failed from an overload possibly. With nine edge routers firewalling against Distributed Denial of Service attacks I doubt such would immediately cause this. Due to the nature of the routing loop involved as what I had posted above. Clearly the routes are not even reaching the datacenter at all (this would not be characteristic of a denial of service attack alone typically, however such a huge attack may actually of led up to this problem if the edge routers got overwhelmed). -Justin
Posted by JacobD, 07-13-2005, 09:20 PM
The issue is being worked on at the moment at the DC to see if there is a way to foil the attempts. We will keep you updated.
Posted by toro, 07-13-2005, 11:08 PM
The issue was related to a 5gbps DDoS attack. It has been resolved. Measures have been taken to aid in mitigation in the event of a future occurrence.
Posted by bosen, 07-14-2005, 12:46 AM
seems the ddos attack back again, all my bots timeout =( i cant do much here just hope staminus is gonna filtered it
Posted by mikron15, 07-14-2005, 12:49 AM
Are you sure its resolved?.. Its been going up n down past 30 mins. And my box is offline past 10 mins Last edited by mikron15; 07-14-2005 at 12:57 AM.
Posted by toro, 07-14-2005, 04:26 AM
Apparently it was not resolved as we had thought. The attack was intensified and broadcasted again. Everything came back but we're still working on preventative/reactive measures.

Add to Favourites Print this Article