Sago Problems This Morning?

Portal Home > Knowledgebase > Articles Database > Sago Problems This Morning?

Posted by HangTenOnTheWeb, 03-04-2008, 11:02 AM
Anyone else having problems reaching their Sago servers this morning? I'm seeing more than 50% packet loss inbound. I can't stay connected to my servers at Sago long enough to do pings/traceroutes outbound. Web, email, ftp, SSH... all not useable at this level of packet loss. Last edited by HangTenOnTheWeb; 03-04-2008 at 11:15 AM.
Posted by Datacenter1, 03-04-2008, 11:08 AM
This was posted few hours ago in the customer portal
Posted by HangTenOnTheWeb, 03-04-2008, 11:16 AM
"Websites and other traffic seem to be unaffected at this time" I beg to differ with them. Either the attack has escalated, or this is a different problem. Every service we have is basically unuseable.
Posted by Datacenter1, 03-04-2008, 11:20 AM
yeah, now is complete down
Posted by Diegol, 03-04-2008, 11:25 AM
Me too. Can't reach any of my sago servers
Posted by karem, 03-04-2008, 11:27 AM
sago down now and we have 2 servers down now i cant imagain this data center down from ddos :ٍS
Posted by bcinc, 03-04-2008, 11:28 AM
Yep, same here - their own site is down too, so no way to view network status etc... ?
Posted by karem, 03-04-2008, 11:29 AM
more than 30 server owned to us down now :ٍS
Posted by karem, 03-04-2008, 11:30 AM
as i know they dont have cisco firewall how can they protect them self and us
Posted by nkawit, 03-04-2008, 11:57 AM
down here aswell .... has anyone managed to reach them?
Posted by Diegol, 03-04-2008, 12:00 PM
seems the servers are up and down no word yet from sago
Posted by sprintserve, 03-04-2008, 12:04 PM
The word is its an ICMP DDOS of about 25 million pps. As for why it will affect the whole network, it's still unclear.
Posted by cfsapper, 03-04-2008, 12:10 PM
Mine is down too. This is honestly very upsetting that such an attack can affect the entire Sagonet service. Talk about BAD network architecture. This is pretty weak on Sago's part. And they haven't updated their 'network status' page to reflect their issues. This is rather pathetic.
Posted by Diegol, 03-04-2008, 12:12 PM
There is currently a dDOS attack that is affecting traffic and connectivity for some customers on Sago's Network. Servers are still powered up and running but some may be receiving alerts that the servers are down due to network connectivity. We are full-staffed and our Network Engineering Department is working to resolve the Distributed Denial of Service attack as quickly as possible and we appreciate your patience while we deal with this network affecting issue. -Sago Management sagonet.com/current-events/network-status.html
Posted by Datacenter1, 03-04-2008, 12:15 PM
Ok is a DDOS http://sagonet.com/current-events/network-status.html My servers are up without problems from the last 10 minutes
Posted by EbonHand, 03-04-2008, 12:19 PM
I just spoke to Sago via their live chat (their site is back up, but my servers aren't) Irena wouldn't elaborate on the problem, even when I mentioned that there's been talk of a DDoS - she limited herself to "there are some network issues which we are working on now" , "it's a network issue which will be fine very shortly..." and "we are working on this now" I recommended an official post here, so that we can all put down our pitchforks - EbonHand
Posted by HangTenOnTheWeb, 03-04-2008, 12:19 PM
I love the way they always say an issue is affecting "some customers". Said the same thing when the generator went down and the whole DC went dark.
Posted by Core4Tech, 03-04-2008, 01:35 PM
This morning, we noticed a denial of service attack, that had decent volume, going towards one of our customers. The impact initially of this attack was not that severe, and we were trying to work with the customer to get the attack under control without impacting our customer via our IDS system. After a short time, the attack grew in intensity, and did start to impact other customers on the same network segment. At approximately 9:30AM Eastern, the attack grew again, however started to include our core routers in the attack, which was not seen previously. The attack directed at our core routers caused BGP to begin to flap with our peers to the Internet, as well as with other core routers. Due to the volume of traffic directed to our routers, especially here in Tampa, we had slow responses when consoled in working on the issue. We were able to get some additional blocks and ACLs in place to stop the attack against our core routers. This took time obviously working with slow console response. At approximately 11:00AM Eastern, we were able to restore all BGP sessions and traffic did return to normal. At this time, we are going over all of the packet captures to look for patterns that we can create additional rules on to place in our IDS system. For further updates, please check our website. We understand the inconvenience this has caused you. If there are any questions, please contact support@sagonet.com as we will only handle issues through our helpdesk from this point forward on this issue. Thank you.
Posted by karem, 03-04-2008, 03:50 PM
thx all online but still slow
Posted by mshannaq, 03-06-2008, 08:28 AM
Now also our 2 servers on sago are down again sago website running very slow also
Posted by karem, 03-06-2008, 08:32 AM
sam here alot of servers down and sago site slow
Posted by Sago-Sean, 03-06-2008, 09:01 AM
I believe Network Engineers have addressed this issue and server connectivity should be normal again. If you are still having issues, please open a ticket.
Posted by mshannaq, 03-06-2008, 09:09 AM
Servers come back now

Add to Favourites Print this Article