Thread: Clustered down?

There website works fine?

Down for everyone or just me? ?

Up here too so either a brief outage or partial network issue?

Don't they have a failover system for that? I thought they had two of everything for 100% uptime

Originally Posted by cloudbackbone

Don't they have a failover system for that? I thought they had two of everything for 100% uptime

Are you in hosting industry?

Originally Posted by JamesSykes

Are you in hosting industry?

Originally Posted by JSamuel

Made me chuckle too

And with a name like cloud backbone too.

Sorry Andy but -1 internets to you.

Originally Posted by cloudbackbone

I thought they had two of everything for 100% uptime

Maybe they had 2 DDoS's at once?

Originally Posted by JamesSykes

Are you in hosting industry?

haha

OP says they were down for half an hour.

if there were two of everything they simply take the server being ddosd off the secondary node, null route the IP, ask their upstreams to null route, and fail everything over to the secondary nodes.

doesnt take 30 mins to do that in my book, most of it should happen automatically when one vps on a node is seen to monopolise resources.

Originally Posted by cloudbackbone

haha

OP says they were down for half an hour.

if there were two of everything they simply take the server being ddosd off the secondary node, null route the IP, ask their upstreams to null route, and fail everything over to the secondary nodes.

doesnt take 30 mins to do that in my book, most of it should happen automatically when one vps on a node is seen to monopolise resources.

What about DNS propagation? What do you do if the attackers are using the domain name rather than the IP as their destination? If the likes of Amazon can be taken offline with a DDoS, I think most providers on here are going to struggle against someone determined.

dns propagation doesnt have any relevance, you have null routed the client and turned them off, any responsible host would do this if trying to keep that client up meant all their other clients were down

most upstreams will accept a bgp announcement of /32 to null route an ip, you can script this easily

hey i am not saying that clustered.net did a bad job or anything, just asking a few questions

just an interesting thing re: DDOS protection... we're about to roll out flowspec (draft-ietf-idr-flow-spec-09 - Dissemination of Flow Specification Rules) across our network. Its basically a way of using M-BGP to distribute firewall filters throughout the network with actions like discard, rate limit, etc. very funky... but unless you have Juniper you can't have it at the moment