deploy.akamaitechnologies.com killing my clients bandwidth

F

Fur

Senior Member
Joined
Jul 6, 2009
Messages
513
Reaction score
0
Hey Peeps

I recantly setup a new sbs2008 server but shortley aftwards i noticed that the client started using alot of bandwith (around 1.6gigs a day) so i installed sharkwire which showed the IP for deploy.akamaitechnologies.com, which is spamming the connection and is using around 120Megs an hour. I google them and they sound like a legit company. Anybody have any ideas?

I have tried blocking them on the router and anti virus aswell as ran a virus scan which found nothing
 
no idea what that is but I have seen that address before on our packet sharper.
 
Um, no they're not "spamming the connection" - Akamai runs servers around the word for distributed software updates or downloads so that the downloads are as localized as possible. You're most likely seeing windows updates or some other application updates. Are there loads of windows clients sharing that router?
 
Can you route traffic through a second PPPoE account? If so get some cheap local bandwidth and route the traffic through there. I used to use that same CDN network to get PSN content pulled locally.
 
Its a 7 user network and for test purposes i turned off windows updates on the server aswell as on the client pc's i also went as far as taking all the user pc off the network and just leaving the server on, i then ran sharkwire and watched deploy.akamaitechnologies.com running like crazy, this went on for about an hour then stopped and 15min later started up again and ran for another hour and then stopped..... rinse and repeat. This has been going on for a week now and so far the server has used almost 10gigs in data, now i relize that they distributed software updates and downloads as i read this too on google.....but 10gigs??
 
akamai is def a legit company, loads of people use them for distributed hosting. Pretty sure McAfee use them as well... could be someone spoofing and trying to look like akamai, why not email them directly and ask them?
 
yea will have to do that btw found a few of these compliants on the net sadly cant find an answer..........


Hello,

I have recently upgraded to Clear OS 5.2 and I have noticed something disturbing.

Every time I have a connection running from my server to Code:

--------------------------------------------------------------------------------
deploy.akamaitechnologies.com
--------------------------------------------------------------------------------

port 80 (Http)

Just from the server! I unplug all computers from the network, restart the server and I still get this connection, I do not have any torrents active so I wonder what the heck is going on.

The connection hogs all my bandwidth and I mean all to the state I cannot use the internet.

I know akamai are load balancers and all that but they don’t pay for my Internet connection

Help me get rid of them

I have tried blocking the domain name but these people have like entire ranges of IP addresses.
Thank you
 
garp said:
Um, no they're not "spamming the connection" - Akamai runs servers around the word for distributed software updates or downloads so that the downloads are as localized as possible. You're most likely seeing windows updates or some other application updates. Are there loads of windows clients sharing that router?
Click to expand...

Exactly what he said. Microsoft uses Akamai for distribution of all their patches, service packs and updates. I'm guessing you've got a couple Windows 7 machines on the network, and they're all pulling down SP1?
Founds like you need to get a router or a separate firewall that allows you to block the ip address ranges that Akamai uses.
 
What about WSUS is it not busy creating an update database from scratch?
 
Got 3 windows 7 machines but they downloaded windows sp1 last week and in any event windows 7sp 1 is around 900megs, today alone i watched it eat thourgh 1.2 gigs from 11am this morning till now. This client in the past would run a hole month on a 5gig account and still have badwidth left over at the end of the month
 
I think it might be that, cant log on remotly cause they just hit there cap :( will have to check tomorrow. Cheers for the help much apperciated :)
 
Akamai is not just for MS updates, its for a whole wide variety.
What is strange, is that it should be using local bandwidth
 
goto DOS and do "netstat -o"
check the "PID" (the process ID associated with the Akamai connection)
open task manager and find the culprit with the associated PID (process or service that's trying to connect)

My guess is:

a) Microsoft Forefront is pulling updates from the Akamai network.
b) Your anti-virus is pulling updates from the Akamai network.
c) Windows Updates are pulling updates from the Akamai network.

if you cannot find the process or service responsible then at least you can block your SBS box from accessing the Akamai network entirely.
Modify your "hosts" file located in "windows\system32\drivers\etc"
Include the following entry in your hosts file: 127.0.0.1 deploy.akamaitechnologies.com
save the file
goto DOS and type "nbtstat -RR" - this will refresh your cache and cause Windows to read the hosts file again.
now PING "deploy.akamaitechnologies.com"
u should now get a reply of "127.0.0.1" (and not Akamai's IP address)

it won't stop your server from trying to connect to Akamai but at least the server won't be bale to connect (and it won't use any bandwidth either)


best of luck,
 
To track the culprit down, my suggestion is to install a dedicated firewall, such as Smoothwall, in order to have every ougoing request logged.

The plus side is that you can have fine-grained controls on which sites to block and which not, using URL Filter.

Good luck in tracking the problem down though.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X