Bust/Nocster [merged]

Portal Home > Knowledgebase > Articles Database > Bust/Nocster [merged]

Posted by WhiteBear, 02-08-2007, 03:26 PM
Nocster is down.
Posted by John[H4Y], 02-08-2007, 03:27 PM
Oh No........
Posted by cbwass, 02-08-2007, 03:27 PM
Any one having problems connecting to ww.burst.net my server with them is not responding and I can't see their website.
Posted by Xandrios, 02-08-2007, 03:28 PM
Well, down...they have some issues but are not completely down. From Europe the route goes over level3 --> yipes (instead of PCCW), and from Chicago it goes over Cogent. In both cases stuff does come through, only with 95% packetloss. The PCCW link seems to have disapeared completely. Nice that they have multiple links for redundancy, but the other links should have some room left over in case one drops out :-X
Posted by HostJedi, 02-08-2007, 03:29 PM
This occured following a network attack...we are looking into it and should be corrected shortly.
Posted by visualfast, 02-08-2007, 03:29 PM
Yeh it has been DOWN My 2 Servers Down
Posted by visualfast, 02-08-2007, 03:33 PM
Huge Attack Getting 80% Packet Loss ....
Posted by Xandrios, 02-08-2007, 03:43 PM
Why is the PCCW link gone completely? All traffic from PCCW is routed over Cogent (Creating even more packetloss on that link). 3. ge13-2.br03.chc01.pccwbtn.net 0.9% 111 0.5 10.4 0.4 194.8 37.1 4. g0-0.core01.ord03.atlas.cogentco.com 2.7% 111 2.6 9.2 0.6 199.5 26.5 [..] 11. hostnoc.demarc.cogentco.com 81.0% 122 33.7 47.6 33.6 126.9 25.6 12. ge1-oc48-1-0-ctsi.rtr0.scr1.hostnoc.net 86.0% 122 125.0 67.4 39.0 156.5 40.1
Posted by John[H4Y], 02-08-2007, 03:49 PM
Looking a bit better now..
Posted by John[H4Y], 02-08-2007, 03:52 PM
From Texas: 65 packets transmitted, 58 packets received, 10% packet loss round-trip min/avg/max/mdev = 61.232/62.262/66.641/0.840 ms
Posted by HostJedi, 02-08-2007, 03:53 PM
Appears to be an attack that the Top Layer DDOS protection units are not handling well. Should be ok now though...and we'll get to the bottom of it with Top Layer. . .
Posted by John[H4Y], 02-08-2007, 03:58 PM
Should we expect any more packetloss or downtime? Did you simply disable or bypass the Top Layer devices?
Posted by John[H4Y], 02-08-2007, 04:00 PM
I am getting 0% loss now. Thank you very much, BurstNET for your very quick response this time. Kudos to you! I wish that every incident was handled this quickly.
Posted by HostJedi, 02-08-2007, 04:06 PM
<< Should we expect any more packetloss or downtime? >> Doubtful, if any...it will be minimal when we update software. << Did you simply disable or bypass the Top Layer devices? >> Cannot comment on such for security reasons. Suffice it to say that the attack is blocked currently. . .
Posted by Cirtex, 02-08-2007, 05:56 PM
Hi, By the attack is currently blocked you mean server is null routed? Because one of our server in the unmetered network is offline for this yet the server has no new customers for past 5 days and averages 500kb to 1mb max outbound... Please let me know. Cheers
Posted by Xandrios, 02-08-2007, 07:06 PM
I think you'd have heard something if the target was your server...