Reseller-Center Down

Portal Home > Knowledgebase > Articles Database > Reseller-Center Down

Posted by td323i, 11-17-2004, 03:00 PM
Hi All, Anyone know whats going on at Reseller-Center? They are housed at Atlanitc.net in Florida. Everything is down, and has been for some time now. Any help would be appreciated. Thanks, Td323i
Posted by bash2, 11-17-2004, 03:17 PM
No idea. They are not answering their support line or calling back voicemails left either.
Posted by advancedp, 11-17-2004, 03:18 PM
Can't access the site either to see what's going on. Not a good time as the server my own site is on at Servint is also down.
Posted by Reseller-Center, 11-17-2004, 03:20 PM
The Atlantic.net is facing a large DoS/DDoS attacks coming in through multiple routes. They are working to resolve the connectivity problems. The atlantic.net issues in turn affect Reseller-Center. No one can answer phones at the moment as we are at the Datacenter
Posted by bluepixel, 11-17-2004, 03:20 PM
Can't get to my sites or their site. Anyone know what's going on? - Jason.
Posted by bluepixel, 11-17-2004, 03:22 PM
Guess I was posting as you sent in your message. Thanks for the update RC. - Jason.
Posted by td323i, 11-17-2004, 03:23 PM
Do you have an ETA on thiss issue? Thanks, Td
Posted by Reseller-Center, 11-17-2004, 03:25 PM
10 Network Engineers working on various routers to trace and block attacks, not sure of an exact time at this moment.
Posted by td323i, 11-17-2004, 03:49 PM
Atlantic.net is up, but RC is still down. Does anyone have an update? Thanks, Td
Posted by td323i, 11-17-2004, 04:27 PM
anyone? This is killing me.........
Posted by Reseller-Center, 11-17-2004, 04:29 PM
It Seems we (RC) are under attack. We are working with the network admins of atlantic.net to address this now. They don't have a time-frame yet.
Posted by td323i, 11-17-2004, 04:56 PM
I know i'm a pain in the rear, but do you have any further info......I need to tell people something. Thanks, Td
Posted by prairiestar, 11-17-2004, 04:58 PM
I'm in the same boat here...need to give customers some kind of information or timeframe...even if it's bad news. Thanks
Posted by rescenter, 11-17-2004, 05:10 PM
I just got off the phone with both the lead tech in Gainsville and my sales rep. My sales rep is calling for a new update so I am typing this while waiting. We are under DDOS possibly from the Postal Service believe it or not. The severity of the attack is so large that atlantic.nets attempt to fix it while leaving us online caused a network wide outage. They then turned our main port to our router off. We are now completely offline. At this time the reason for the attack is not clear.
Posted by pdivi, 11-17-2004, 05:16 PM
This outage is horrible. Didn't the same thing happen at Atlantic earlier this week?
Posted by dhaberer, 11-17-2004, 05:28 PM
looks like it's still ongoing. Sucks cause I just put two clients online over the weekend. I haven't exactly gotten the greatest response from them today.
Posted by pdivi, 11-17-2004, 05:31 PM
What's the "multi-homed" network that RC refers to, and how can I move into the other home?
Posted by td323i, 11-17-2004, 05:38 PM
Any word? I saw that one router came up on the server monitor, but it quickly turned red again. Any info? Thanks, Td
Posted by bluepixel, 11-17-2004, 05:44 PM
Can someone post the link to the server monitor? I don't have it with me ATM. (also would like to know what's being done) Thanks.
Posted by Griswold, 11-17-2004, 05:47 PM
209.208.124.18:8080
Posted by advancedp, 11-17-2004, 05:50 PM
Thanks for this but ouchhhhhhhhh. I must remember to turn the speaker volume down.
Posted by rescenter, 11-17-2004, 05:51 PM
Yes atlantic.net had another outage this week. That one was pointed at someone else but had the same effect. My latest update from them is that they are trying to locate the source as it was a spoofed attack. (Postal Service) They are now trying to locate the true source. They are leaving us offline until they find the source. The best estimate that they will give me is that we will be back online "Later Tonight" The attack is only focused on one ip so I am trying to get them to return the rest of our ip blocks back on. They are unwilling to do so at this time.
Posted by bluepixel, 11-17-2004, 06:03 PM
Thanks - got the Server Monitor Addy. RC - please notify Forum Admin's if that needs to be removed from the forum. - Jason
Posted by rescenter, 11-17-2004, 06:46 PM
Latest update. I spoke with Atlantic.net about restoring at least partial service to Ips not under attack. They replied that they are under a new attack even with us completely offline and absolutely cannot bring us back online in any form at this time. I believe that Atlantic.net is doing this to help them be able to identify and stop the source of the attack quicker. They feel that if we are brought back online before that happens then the attack will cause more network issues. This is a hard time for RC. We will get through though. I have the email support@reseller-center.com functioning due to our offnetwork monitor page.
Posted by pdivi, 11-17-2004, 06:50 PM
Seems like Atlantic.net hasn't been doing very well for you lately, and the effect is rippling down to your customers. Why stick around?
Posted by FHDave, 11-17-2004, 06:50 PM
There is no reason that your provider null route all of your IPs. How much packets per second of DDOS attack are you receiving? How much bandwidth does it take? Sorry to hear about the problem. I hope you can ride through this DDOS attack soon.
Posted by td323i, 11-17-2004, 07:13 PM
I'm alittle surprised that Atlantic can't do anything else to help besides pulling the plug on RC......... It just doesn't seem fair. I'm a client of RC, and respect their decision, but i think its totally unacceptable. Hopefully this gets corrected by morning......if not, I'm screwed. Thanks Td
Posted by sundial1, 11-17-2004, 07:23 PM
Yah, I agree Td. One would think that there would be a better solution than blocking who knows how many people's sites/e-mails. I'm sure a lot of you all have had fun days of phone calls from clients just like I have.
Posted by td323i, 11-17-2004, 07:26 PM
It seems to be back up!! Hopefully the guys at RC can do something to prevent this from happening in the future. Thanks, Td
Posted by sundial1, 11-17-2004, 07:30 PM
And of course as soon as I post that the servers come back. : )Thanks RC!
Posted by rescenter, 11-17-2004, 07:40 PM
yeah back online. I am calling now as I still have not heard from atlantic.net though.
Posted by gbcactus, 11-17-2004, 08:45 PM
At least RC customers like myself were able to find out what was happening by using this forum. I was able to tell my clients the network was down rather than I don't know. By the way, I've been a Reseller Center customer for more than a year and they genuinely seem to care about their operation. All support questions have been answered promptly.
Posted by tsystems, 11-17-2004, 09:24 PM
This was likely targeted at just one domain of one customer of one reseller of Reseller-Center. All of the rest of us are just unintended victims. As we as an industry continue to aggregate this will get worse and worse. The backbone providers seem to be nowhere close to being able to protect us. I would guess it will be 4 or 5 years before they will have what it take to shut down a massive DDOS at will. The only real solution I can think of is for the control panel software companies to add load sharing or redundancy from one provider to another. So I can have one account with Reseller-Center and another one with some completely different and unrelated provider. I would be paying for 2 accounts and a lot of overhead but it would be worth it. If Reseller-Center installs redundancy, then any attack would automatically bring down both of their points of presence. I know that databases and email don't load share well. I'm probably asking too much.
Posted by pdivi, 11-18-2004, 10:59 AM
Two extended outages in one week, thousands of dollars in revenue lost. Redundancy seems like a tiny investment in comparison. Not even sure where to begin looking how to set this up...any advice?
Posted by dhaberer, 11-18-2004, 11:53 AM
sites are still down at RC. they've told many people to switch to dedicated IPs that on are a certain server. on top of that, there are still ips that are blocked for outgoing traffic. Essentially, none of my sites that use XMLHTTP to send/receieve data from Authorize.net work. I've lost over $2k in the last 24 hours so far based on the purchases that have been attempted but failed as a result of this.
Posted by tsystems, 11-18-2004, 04:07 PM
As I am thinking about this, it is not absolutely necessary to have the control panel support it. You would be best advised to use the same control panel at both providers. In my case Hsphere. For static pages upload to both providers and set the Authoritative DNS servers for the domain so they point one to provider A and the other to provider B. This is done at your registrar i.e. Dotster or Go Daddy. You would have to add extra DNS entries at both providers to let you explicitly get to the servers. For example ftpA.yourdomain.com and ftpB.yourdomain.com What happens is that whichever providers DNS server answers first gets that customer. When one provider goes down then the other providers DNS is always answering first. This method will not split the traffic 50-50 when both providers are up. It is useless when one providers web server goes down but their DNS server is still up. All web pages, databases and settings must be uploaded to both providers. Both providers would need to use similar naming conventions. You would need to disable mail on one provider or use POP3 to check both providers. IMAP would only let you see mail that happened to go to the provider you are checking. You would need separate SSL certificates and it may cause problems if the clients web browser switched from one web server to the other in the middle of a secure transaction. The customer order history would not automatically be at both providers. There are utilities out there for each issue but they are not integrated with the control panels. Most of the utilities I have seen are geared toward multiple dedicated servers.
Posted by pdivi, 11-18-2004, 04:52 PM
tsystems, Hmmm. I think I get it. Know of any good Windows hosts that offer this sort of redundant configuration as part of a reseller package? I'd rather pay a host (one w/ two data centers) a bit extra for the config. versus setting it up myself between two hosts, having two bills to pay each month, etc.
Posted by tsystems, 11-18-2004, 05:32 PM
pdivi, I don't know of any reseller packages like this. I have seen single domain hosting like this. It was over a year ago and they didn't have a control panel. The prices were something like 5 to 10 times what I pay for a reseller account now. However if a denial of service attack is directed at such a provider, it is quite likely that both of their datacenters will go down. Only by spreading accross 2 providers can you get what I am after.