Comment by OVH - Wednesday, 30 April 2014, 17:51PM
The ACE is now rebooting
Comment by OVH - Wednesday, 30 April 2014, 17:52PM
We tested a lot of things and it seems the
problem is coming from the ACE in Frankfurt.
We opened the TAC support and we're checking with
Cisco to see if the ACE is broken or we have a
bug.
Comment by OVH - Wednesday, 30 April 2014, 17:52PM
2nd reboot.
Comment by OVH - Thursday, 01 May 2014, 01:16AM
we shutdown frankfurt, amsterdam and london.
Comment by OVH - Thursday, 01 May 2014, 01:16AM
we tested to run again frankfurt. it doesn't work.
Comment by OVH - Thursday, 01 May 2014, 01:16AM
we removed the IP that is DDoS's from CDN to Mutu.
CDN works fine now.
Mutu has no problem to manage the DDoS.
It's a L7 DDoS with the true requests to 1 URL.
The origine of the DDoS: Russia.
Comment by OVH - Thursday, 01 May 2014, 01:16AM
2086 IP making 100K request/sec. we are blocking them now.
The ACE is now rebooting
We tested a lot of things and it seems the
problem is coming from the ACE in Frankfurt.
We opened the TAC support and we're checking with
Cisco to see if the ACE is broken or we have a
bug.
2nd reboot.
we shutdown frankfurt, amsterdam and london.
we tested to run again frankfurt. it doesn't work.
we removed the IP that is DDoS's from CDN to Mutu.
CDN works fine now.
Mutu has no problem to manage the DDoS.
It's a L7 DDoS with the true requests to 1 URL.
The origine of the DDoS: Russia.
2086 IP making 100K request/sec. we are blocking them now.
blocked