|
Nicht-Erreichbarkeit der Webseiten
Starting APRIL 11, 2004, we have been victim of a very
large SYN flood coming to port 80 of our URL forwarding
clusters. The attack is hitting facilities and is causing
bottlenecks to be reached on our IP circuits and the hosts
themselves. We have been working diligently with our
providers to filter out the garbage and keep everything
online. Up to this point we have seen very few timeouts,
but we do realize things are running a bit slow. We are
applying filters to our upstream links as well as adding a
few hosts into the cluster to help with the load.
Please be patient as we mitigate this attack.
UPDATE:
APRIL 14, 2004
We had another attack start yesterday evening at around
7:00pm PST. It was identical to the attack that occurred
on the 10th and 11th earlier this week. Huge amounts of
SYN packets to each of our servers, We have blocked some
of the biggest offenders and I have listed their IP's
below.
80.x.x.x
81.x.x.x
82.x.x.x
83.x.x.x
200.x.x.x
217.43.x.x
63.168.x.x
202.x.x
The attack has stopped once again, So we will be removing
these IP ACL's
shortly.
If you want to help, start asking your ISP to do egress
filtering! If ISP's did not allow spoofed hosts, or hosts
sending out millions of unacknowledged SYN requests, we
would not be dealing with this issue.
Also, we are adding equipment and looking into some more
options that will permanently resolve these issues.
Thank you all for your patience.
Customer Care
|
|
