-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: Do you think Bafana Bafana will win tonight?
Elitehost down?
- Thread starter breacher
- Start date
Elitehost
Well-Known Member
Thank you for your patience, the network has been mostly stabilised.
We are still experiencing a network outage on the server: rs04-pta.za-dns.com
We are working to get all services restored as soon as possible and will keep you updated with the progress.
We are still experiencing a network outage on the server: rs04-pta.za-dns.com
We are working to get all services restored as soon as possible and will keep you updated with the progress.
WAslayer
Honorary Master
This problem is easily solved, for at least local visitors to elitehost, if the destination IP in the DDOS is blackholed or null routed in the last hop internationally before hitting SA.. All international traffic to Elitehost is dropped for the duration of the DDOS, but all SA people can visit Elitehost no issues..
Unfortunately 90% of my sites are on rs04-pta.za-dns.com. What is the reason that it's still down? was it one of the sites on that server that was the target of the attack?
Murmaider
Expert Member
In theory yes, but in practice no.
Alot of international traffic comes through via JINX and NAP Africa. Particularly IP ranges behind Hurrican Electric, Microsoft Azura, Google Cloud Services, etc. As international traffic is coming through the local exchanges, mixed with all SA based local traffic, it requires some creativity and onsite DDoS mitigation with large pipe.
Stride Mother
Well-Known Member
I'm also on rs04-pta.za-dns.com, so I'd love to know the reason too.
Elitehost
Well-Known Member
Thank you for your continued patience, our network engineers took initial action by blocking all international traffic to the affected IP. This was partially effective but further action was required as a large portion of the traffic came from local sources.
The IP has been blocked locally and internationally. We are monitoring the network and will continue working to get services restored to rs04-pta.za-dns.com.
Our deepest apologies for the extended downtime and disruptions.
Can anything be done besides waiting out the attack?
Do you know what site was targeted?
I'm still having issues with cp05-jhb and sh02-pta. sh01-pta seems to be fine, as is cp03-pta.
Intermittent access to the client area; very slow when it does work (slower than it normally would be with WHMCS).
Intermittent access to the client area; very slow when it does work (slower than it normally would be with WHMCS).
Sure, I get you. But doesn't this only really apply to shared servers? My VPS instance over at domains.co.za has not been down once since I got it last year. EH shared has had more downtime after I came onboard than it did before that, but nothing unacceptable like Afrihost, which I dropped a long while ago.
That aside, would you recommend H9s 2-core VPS for an SME law firm? The pricing looks pretty good, but just want to get some insight regarding performance and priority support.
Im really considering leaving. Had good support from them. But need more after hours support sometimes also and they dont. they seem to knock off @6
@Elitehost:
This is starting to get out of hand now.
The level of service being received is starting to be pretty much in line with that of Afrihost, which many of us here know is far from acceptable. The last time this happened (March of last year, if I recall correctly), updates were much more frequent and detailed. Now we're just getting vague updates about attacks, with no technical explanation as to the complexity and type of attack the network is being hit with and what is being done to mitigate/resolve.
The status page hasn't been updated since 13:51, where it currently states that most of the network is stabilised, excepting for rs04. Meanwhile, I'm still unable to connect to anything on cp05 and sh02, and I'm receiving CF errors (mostly regarding SSL handshakes) when trying to log into the client area. Opening a ticket would be of no use to me as it seems that system is also intermittent due to the attacks (perhaps you need a secondary support system on a third-party host, like you do with your status page?)
I really do get that your uptime has been great, for the most part, and I haven't had any major issues since migrating over to you. However, looking at the level of service being provided on public channels, I wonder if I need to start making reconsiderations. As a shared-hosting client, I expect there to be a problem every once in a while, but I certainly don't expect service-levels like this. R35 or not, it just isn't right.
Please can we have some detailed feedback?
This is starting to get out of hand now.
The level of service being received is starting to be pretty much in line with that of Afrihost, which many of us here know is far from acceptable. The last time this happened (March of last year, if I recall correctly), updates were much more frequent and detailed. Now we're just getting vague updates about attacks, with no technical explanation as to the complexity and type of attack the network is being hit with and what is being done to mitigate/resolve.
The status page hasn't been updated since 13:51, where it currently states that most of the network is stabilised, excepting for rs04. Meanwhile, I'm still unable to connect to anything on cp05 and sh02, and I'm receiving CF errors (mostly regarding SSL handshakes) when trying to log into the client area. Opening a ticket would be of no use to me as it seems that system is also intermittent due to the attacks (perhaps you need a secondary support system on a third-party host, like you do with your status page?)
I really do get that your uptime has been great, for the most part, and I haven't had any major issues since migrating over to you. However, looking at the level of service being provided on public channels, I wonder if I need to start making reconsiderations. As a shared-hosting client, I expect there to be a problem every once in a while, but I certainly don't expect service-levels like this. R35 or not, it just isn't right.
Please can we have some detailed feedback?
Last edited:
+1
Last edited:
cant they put main ips & servers on Cloudflare
I don't think it works that way... They would need to clarify, because clients should really be getting their own CF. Here's a snapshot of everything dnsdumpster knows about cp05:
From that, one can tell that it wouldn't support direct CF/DNS links. I don't know so much about how all that kinda stuff works, so again, they would need to clarify.