Cool Ideas suffers massive outage due to DDoS

[Bradley Prior]

Cool Ideas suffers massive outage due to DDoS

Internet service provider Cool Ideas has been hit by a DDoS attack which has affected its ability to provide a stable Internet connection to its customers.

“We are currently experiencing a distributed denial of service attack that is affecting all customers on our network,” said the company in a statement.

 

[daveza]

Who ?

 

[airborne]

Doesn't Cool Ideas regularly get this issue, who did they pi55 off that badly?

 

[Herr der Verboten]

Doesn't Cool Ideas regularly get this issue, who did they pi55 off that badly?

CW?

 

[Tinuva]

This is where their choice of upstream provider will hurt them. I like HE.net for IPv6, but I dislike when ZA ISPs use them as their upstream provider. HE.net is actually a horrible tier1 provider. Even Cogentco is miles better.

Having access to nullroute ips in London before it hits your backhaul to SA using BGP communities helps bucket loads in these situations, especially if automated.

 

[furpile]

This is where their choice of upstream provider will hurt them. I like HE.net for IPv6, but I dislike when ZA ISPs use them as their upstream provider. HE.net is actually a horrible tier1 provider. Even Cogentco is miles better.

Having access to nullroute ips in London before it hits your backhaul to SA using BGP communities helps bucket loads in these situations, especially if automated.

From the CI thread it seems they did move over to Cogent now.

 

[Happy Days]

This is where their choice of upstream provider will hurt them. I like HE.net for IPv6, but I dislike when ZA ISPs use them as their upstream provider. HE.net is actually a horrible tier1 provider. Even Cogentco is miles better.

Having access to nullroute ips in London before it hits your backhaul to SA using BGP communities helps bucket loads in these situations, especially if automated.

Sounds like you should be consulting for Cool Ideas

 

[Tinuva]

Sounds like you should be consulting for Cool Ideas

I think there are many people better than me.

That said, seeing the post above yours, they just need to automate the process now that detects the ips receiving abnormal traffic and nullroute them in realtime using bgp route injection.

When we did this at my previous work place, it made life so much better not having to figure out what is going on each time, just look at the dashboard and received email updates on whenever something happens. 1 person may have been affected, but the rest of the network was usually fine.

 

[TheRoDent]

This is where their choice of upstream provider will hurt them. I like HE.net for IPv6, but I dislike when ZA ISPs use them as their upstream provider. HE.net is actually a horrible tier1 provider. Even Cogentco is miles better.

Having access to nullroute ips in London before it hits your backhaul to SA using BGP communities helps bucket loads in these situations, especially if automated.

We have both Cogent and HE

 

[TheRoDent]

We have both Cogent and HE But alas that does not entirely dissipate an attack.

 

[j4ck455]

I was wondering why Netflix was buffering on rewind, now I'm grateful that I was able to watch anything at all when I got home this evening.

We have both Cogent and HE

Good to know that you're on top of this Mr RoDi

 

[TheRoDent]

I was wondering why Netflix was buffering on rewind, now I'm grateful that I was able to watch anything at all when I got home this evening.



Good to know that you're on top of this Mr RoDi

What were you streaming BTW? We have several red Netflix boxes in our network.

 

[SeaSickMama]

What were you streaming BTW? We have several red Netflix boxes in our network.

Suits alone tonight has been weird with the quality at start and a buffer every now and then.

 

[GhostSixFour]

O. Is this what happened? I received an email from Vumatel saying there has been maintenance done, and marked it down to that.

 

[Tinuva]

We have both Cogent and HE

Thats great. Only need to drop HE now and then add a DDoS detection system that is scripted to inject BGP null route rules, which will then drop the traffic on Cogent's edge long before it even reaches your network. The detection system is needed to automate the whole process, then you guys can sleep at night

 

[TheRoDent]

Thats great. Only need to drop HE now and then add a DDoS detection system that is scripted to inject BGP null route rules, which will then drop the traffic on Cogent's edge long before it even reaches your network. The detection system is needed to automate the whole process, then you guys can sleep at night

We have this.

 

[Hunted]

I must be lucky, but I haven't experienced any issues last night whilst jamming PUBG

 

[SeaSickMama]

Is this attack just that large then that a measure like this in place can't help ?

We have this.

 

[Tinuva]

Is this attack just that large then that a measure like this in place can't help ?

Or the measure in place is not working, or its not a DDoS attack.