Web Squad ISP

[rvanwyk]

Just did an upgrade and paid. Any chance of processing it or is it instant?

 

[websquadza]

Just did an upgrade and paid. Any chance of processing it or is it instant?

Just followed up with the team and made sure your upgrade was processed. Should be sorted asap.

 

[DarkSt0rm]

Seeing this to any other destinations? Seems to originate at Blizzard’s edge. I’ve sent our upstream a request to reach out to Blizzard to see what’s potting there.

1.1.1.1 and 8.8.8.8 also having periodic spikes and packet loss on the WS1 JHB exit node. Will check again when I'm back home later though

 

[websquadza]

1.1.1.1 and 8.8.8.8 also having periodic spikes and packet loss on the WS1 JHB exit node. Will check again when I'm back home later though

Thanks. Will check this too.

 

[DarkSt0rm]

Thanks. Will check this too.

Seeing loss on the last hop on google still, so it might just be ICMP throttling there


But still seeing that loss on 8.8.8.8 and 1.1.1.1


The blizzard routes are a really bad today

 

[websquadza]

Seeing loss on the last hop on google still, so it might just be ICMP throttling there
View attachment 1214822

But still seeing that loss on 8.8.8.8 and 1.1.1.1
View attachment 1214824

The blizzard routes are a really bad today
View attachment 1214826

Thanks for the update. Odd that the locals are only presenting on the last hops like that. Looking into it.
WRT to blizzard, I did ask if they could try switch to DE-CIX instead of LINX. Will update if this is possible.

 

[Krazee]

Finally managed to stretch the legs on my line, 900+Mbps and then 10 minutes later , everything on my line stops.
Did I get blackholed? , just getting some "linux distros" and some steam games.

 

[DrJohnZoidberg]

Did I get blackholed?

Most likely. WS have had very aggressive DDOS protection in the past that would trigger easily when you're pushing too many packets too quickly. Not the best ISP to be with if you're planning to push a gigabit line.

I ultimately had to move to a different ISP due to this, although for most people (on slower connections) this shouldn't be an issue.

 

[Gimli_]

Most likely. WS have had very aggressive DDOS protection in the past that would trigger easily when you're pushing too many packets too quickly. Not the best ISP to be with if you're planning to push a gigabit line.

I ultimately had to move to a different ISP due to this, although for most people (on slower connections) this shouldn't be an is

Which ISP did you go to?

 

[Gimli_]

@websquadza I am not getting to fast.com on ipv6 lately. I always used it to check ipv6 connectivity but lately it always resolves to the IPv4 speed test. Any explanation for this?

 

[websquadza]

Finally managed to stretch the legs on my line, 900+Mbps and then 10 minutes later , everything on my line stops.
Did I get blackholed? , just getting some "linux distros" and some steam games.

View attachment 1214876

Can you PM me your IP address? Not seeing anything in the logs, but want to be sure. Normal downloads and even torrents won’t trigger the DDOS protection even at full 1Gbps speeds. I’m guessing you were pulling from steam here?

 

[websquadza]

@websquadza I am not getting to fast.com on ipv6 lately. I always used it to check ipv6 connectivity but lately it always resolves to the IPv4 speed test. Any explanation for this?

Interesting- that would usually come down to DNS. But will take a look at this and confirm. Are you struggling to reach anything else on v6?

 

[websquadza]

Most likely. WS have had very aggressive DDOS protection in the past that would trigger easily when you're pushing too many packets too quickly. Not the best ISP to be with if you're planning to push a gigabit line.

I ultimately had to move to a different ISP due to this, although for most people (on slower connections) this shouldn't be an issue.

Just the one use case that seems to trigger the TCP protection. Otherwise no issues with 1G users being able to saturate lines.

 

[rvanwyk]

Just followed up with the team and made sure your upgrade was processed. Should be sorted asap.

Thanks! Seems my little USG struggles with 1Gbps even with IPS off

 

[Gimli_]

Interesting- that would usually come down to DNS. But will take a look at this and confirm. Are you struggling to reach anything else on v6?

No problems with anything google related (mail, search, youtube) as an example.

In fast.com I usually saw my ipv6 ip address in the details but now I see my ipv4 address. Also:

Seems that the web page loads from their ipv6 but all the other services that send data as part of the test does so on ipv4

	fast.com	2600:1416:1000:193::24fe
	api.fast.com	176.34.135.224
	ichnaea-web.netflix.com	52.51.207.105
	ipv4-c002-fra002-dev-ix.1.oca.nflxvideo.net	45.57.74.168
	ipv4-c003-fra002-dev-ix.1.oca.nflxvideo.net	45.57.75.167
	ipv4-c003-hre001-liquidtel-isp.1.oca.nflxvideo.net	41.174.127.253
	ipv4-c018-jnb001-ix.1.oca.nflxvideo.net	45.57.5.138
	ipv4-c019-jnb001-ix.1.oca.nflxvideo.net	45.57.4.139

 

[DrJohnZoidberg]

Thanks! Seems my little USG struggles with 1Gbps even with IPS off

It shouldn’t. Make sure that smart queues are disabled too.

 

[rvanwyk]

It shouldn’t. Make sure that smart queues are disabled too.

Thanks. I did. Only getting around 550 - 650. Once it hit 740.

 

[DrJohnZoidberg]

Thanks. I did. Only getting around 550 - 650. Once it hit 740.

I can get ~900Mbps on my USG so it’s definitely capable of it.

 

[rvanwyk]

I can get ~900Mbps on my USG so it’s definitely capable of it.

Thanks. That helps to try and isolate the issue. Perhaps my area or line. Will test with PC directly connected to CPE.

 

[DarkSt0rm]

Getting quite a bit of loss again. Been fine up until around 14h30