Elitehost down?

Our .co.za site seems to be working fine.
Is this only affecting international sites?
 
Thor187 said:
Don't you think it's time you contact mybb and do an investigation and write up a article on who is behind this?

Clearly this is not a once off odd script kiddie squad.

You guys have been beaten and out skilled now for weeks on end. Surely something else is up regarding this sudden non stop DDoSing
Click to expand...

I doubt MyBB will be able to find out much about this. It most likely an individual with a botnet DDoS'ing companies. It requires absolutely no skill. It's most likely a person involved with a competitor who is trying to cause some damage.

Elitehost said:
Hi chris_meier,

Apologies for this we launched a new status page and are working with the provider to try resolve the "Access Denied" issue. It was likely hit by a DDoS as well (judging by the number of requests to our main website) causing them to block access. Our website and client area are currently working via CloudFlare, we are seeing some issues due to international traffic being degraded. This is a paid CloudFlare Plan with WAF enabled. CloudFlare has cached over 90 million request to our website in the past few days but still passed just under 1 million request to our web servers.

The attacks on our network are completely out of our control. We are working as hard a possible to minimise the impact of these issues. We are monitoring the network closely and are actively mitigating attacks as they occur.

As of yesterday afternoon we were still receiving DDoS traffic. Network traffic looks better this morning with no attacks detected yet. We are now working on resolving the issues with the status page and getting an email our to all clients.

Thank to all clients for your patience and understanding during this time.
Click to expand...

Can you not rate limit your website processes and allowing for queuing of transactions on the front-end? It wouldn't obviously stop the attack, but it would mean the difference between having your site still operational and offline. CloudFlare becomes rather useless if the attacker knows the IP range. Maybe you could purchase a IP's on another range and shift your website to that location?

It's unfortunate, but it does raise the importance of adequate DDoS protection, Web Africa and some smaller ISP's had/have the same problem. Maybe look at something like Incapsula or Fortinet, physical solutions. Does your upstream provider not have a solution for you?
 
Enigma_ said:
It's most likely a person involved with a competitor who is trying to cause some damage.
Click to expand...

You really think so? No hosting company I know of would even consider doing business with someone like that. It's like the Mafia - if you fall out of favour, you'll become the target!
 
I also thought it would most likely be a competitor, or disgruntled former customer?
but why risk the criminal record?
And who do you go to to help you solve something like this?
I'm sure Elitehost is on it though, and Im sure they won't reveal their strategy here.
 
Enigma_ said:
Maybe look at something like Incapsula or Fortinet, physical solutions. Does your upstream provider not have a solution for you?
Click to expand...

Incapsula is about $11 000 (R170 000) per month for their base cost, this is to provide 100Mbits of clean traffic.(if we talking about infrastructure protection here and not just a website proxy)

So you can work out the cost on 1Gbit or 10Gbit of clean traffic.
 
Murmaider said:
Incapsula is about $11 000 (R170 000) per month for their base cost, this is to provide 100Mbits of clean traffic.(if we talking about infrastructure protection here and not just a website proxy)

So you can work out the cost on 1Gbit or 10Gbit of clean traffic.
Click to expand...

May aswell buy more upstream and just manage more than they can DDOS :D
 
Enigma_ said:
Can you not rate limit your website processes and allowing for queuing of transactions on the front-end? It wouldn't obviously stop the attack, but it would mean the difference between having your site still operational and offline. CloudFlare becomes rather useless if the attacker knows the IP range. Maybe you could purchase a IP's on another range and shift your website to that location?

It's unfortunate, but it does raise the importance of adequate DDoS protection, Web Africa and some smaller ISP's had/have the same problem. Maybe look at something like Incapsula or Fortinet, physical solutions. Does your upstream provider not have a solution for you?
Click to expand...

We initially implemented rate limiting on our main website, blocking anyone doing a certain amount of page views per second. This helped initially. We then activated CloudFlare and routed traffic via different IPs to ensure CloudFlare can connect correctly.

The scale of the attack has been huge though between 50 and 300Gbps attacking multiple network locations. Our upstream provider EOH does use Arbor Peakflow devices but due to the size they have been null routing IPs that are attacked to minimise impact on their international peering and interconnects.

We'd like to give thanks to MyBB users, the support and understanding received from the community has been great.
 
Enigma_ said:
Can you not rate limit your website processes and allowing for queuing of transactions on the front-end?
Click to expand...

Elitehost already mentioned that the scale of the attack was just too insane to have this work properly, but even if it worked, any request queued over and above the limited processes able to dish out web pages would ultimately mean timeouts and most likely F5 being hit to refresh and being requeued for another request etc.
 
Looks like there is a problem this morning, no response from their support yet.
 
furnic said:
Looks like there is a problem this morning, no response from their support yet.
Click to expand...

Good Day furnic, we have attended to one issue that occurred this morning. Our technical support should have responded already. If the issue has not been resolved then please let me know your domain/ticket number via PM so I can check further for you.
 
And currently, whats the issue, looks all down, email, hosting,,,,,all not working:mad:
 
furnic said:
And currently, whats the issue, looks all down, email, hosting,,,,,all not working:mad:
Click to expand...

Our upstream EOH is experiencing issues, our monitoring is showing our network is online. We are seeing peering issues on some local networks now though.
 
Elitehost, please can we have some details about the latest outage? This is affecting all of my accounts...
 
_neo said:
Elitehost, please can we have some details about the latest outage? This is affecting all of my accounts...
Click to expand...

Hi _neo,

Our apologies for this, we experienced an outage today from around 15h30 to 16h10. We are awaiting an incident report from the upstream provider but from our side we saw some peering links down, while the network was still accessible via NapAfrica.

We posted updates on our status page, please subscribe to receive updates in future.

http://status.elitehost.co.za/

Regards,
Jason
Elitehost
 
Elitehost said:
Hi _neo,

Our apologies for this, we experienced an outage today from around 15h30 to 16h10. We are awaiting an incident report from the upstream provider but from our side we saw some peering links down, while the network was still accessible via NapAfrica.

We posted updates on our status page, please subscribe to receive updates in future.

http://status.elitehost.co.za/

Regards,
Jason
Elitehost
Click to expand...

Hi Jason,

Thanks. I did see the update on the status site, but it only appeared after I posted this question. So the only thing I had to go on was the tweet and a status site that said everything was operating normally, with no incidents.

(I still miss the old status site, but completely understand why you took it down.)
 
Hi lived666,

Apologies for the inconvenience, we are experiencing degraded performance on our Cloud infrastructure.
This is affecting a wide range of servers.

We hope to have services restore ASAP, please see over here for status updates: http://status.elitehost.co.za/
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X