Web Squad ISP

[websquadza]

@websquadza I'm now being blackholed even on 25 connections. I actually can't can't download now without my internet being cut off for a few mins. What do I do?

We're still working on this. Remember, we don't limit connections or connection type, the issue here is PPS per IP connection (IE total packets per second between your IP and the server). Our logs show 300-400% spikes in expected PPS on single sessions on your connections.. Basically, your NNTP application is breaking up connections into tinier and tinier packets to increase speeds (which is a clever plan to speed things up). However, these packet volumes are indistinguishable from DDOS flood traffic - so this is an issue for us and our clients. Disable the limiter, put the network at risk. Our vendor is analysing the traffic to see what we can do to distinguish between these patterns - we are on their case as ideally we'd like to have this working 100%.

 

[Seeyou]

We're still working on this. Remember, we don't limit connections or connection type, the issue here is PPS per IP connection (IE total packets per second between your IP and the server). Our logs show 300-400% spikes in expected PPS on single sessions on your connections.. Basically, your NNTP application is breaking up connections into tinier and tinier packets to increase speeds (which is a clever plan to speed things up). However, these packet volumes are indistinguishable from DDOS flood traffic - so this is an issue for us and our clients. Disable the limiter, put the network at risk. Our vendor is analysing the traffic to see what we can do to distinguish between these patterns - we are on their case as ideally we'd like to have this working 100%.

I could give you the server addresses if you'd like? Maybe the simplest solution would just be to whitelist the traffic from me to them?

 

[Nemus]

My speedtest right now, on my 20mbps line (promo to 50mbps):

Ping: 3ms
Download: 89.42Mbps
Upload: 25.32Mbps

I hope this promo is extended hint hint

 

[PsyWulf]

My speedtest right now, on my 20mbps line (promo to 50mbps):

Ping: 3ms
Download: 89.42Mbps
Upload: 25.32Mbps

I hope this promo is extended hint hint

Careful,last time I had extra speed it's because I was crosspatched with my neighbours

 

[websquadza]

Apologies for the delay here, no notifications of posts here (anyone know how to get this working?) and we’ve been at in the DC all afternoon so not checking up as often as usual- please can you submit tickets for pressing issues- support can quickly escalate if needed and we can track this more rapidly.. Issue seems to be linked to the Vumatel aerial network as trenched clients are all OK and my tests here (trenched) are ok.

In the meanwhile, as mentioned, please submit a ticket. I’ll ask the team to quickly submit tickets to Vumatel. Any other Aerial clients struggling?

I see the three of you are in different regions too- so quite widespread. Sending AEX NOC a mail in the meanwhile.

Can you please send an MTR to google?

A little post mortem report here. Vumatel identified an issue affecting a small subset of Aerial OLTs (including Glenhazel and Savoy) - it related to a bckhaul service going down and traffic being re-routed along a faulty path, leading to packet loss.

 

[Looney]

A little post mortem report here. Vumatel identified an issue affecting a small subset of Aerial OLTs (including Glenhazel and Savoy) - it related to a bckhaul service going down and traffic being re-routed along a faulty path, leading to packet loss.

Thanks for the feedback, that explains last nights issue. Seems to be fine now.

 

[Seeyou]

I'd really like some kind of solution to this issue. I forgot I had my downloader unpaused, it downloaded something in the background, and I got blackholed and disconnected from a game I was playing. This is stupid.

 

[Seeyou]

Alternatively downgrade me back to 200mbps, I never seemed to have issues there.

 

[Leno]

@websquadza thanks for help, my order with Openserve has been placed

A quick question about the ipv6, do I have to use your router or will I be able to use my mikrotik like I do with my current ISP

 

[websquadza]

@websquadza thanks for help, my order with Openserve has been placed

A quick question about the ipv6, do I have to use your router or will I be able to use my mikrotik like I do with my current ISP

Looking forward to having you connected!
You’re more than welcome to use your MikroTik router. We’ll send you instructions for configuring IPv6.

 

[SFW007]

@websquadza maybe you should automate outages when bitstreams send you OLT outages.
We get MFN and Vuma notifications

@Seeyou quick question why would you want to max out your gigabit connection for NNTP ?

 

[Seeyou]

@websquadza maybe you should automate outages when bitstreams send you OLT outages.
We get MFN and Vuma notifications

@Seeyou quick question why would you want to max out your gigabit connection for NNTP ?

I don't need to max it out, but what's the point of having gigabit and only being able to reach 300mbps on downloads? That's like buying a ferrari, and someone asking "Why do you need to go fast? Driving at the speed of a bus will still get you there?"

Anyhow, the issue isn't maxing it out, but that ANY NNTP download for me gets me blackholed by the DDoS protection software. @websquadza has explained the reason behind it and it's understandable, I'm just not enjoying being cut off for a few minutes every time NNTP is active, hence the request for a solution or a downgrade.

 

[Seeyou]

Just so there's no confusion as someone already asked - WS isn't imposing connection or throughput limits or shaping or anything like that.

SABnzbd is, for whatever reason, generating enough packets per second on a gigabit line to trigger the upstream DDoS protection software, which then cuts off the source IP from the internet for a few minutes. So any time a download happens on my side, I get disconnected. Lacking any other kind of solution, I'd rather go back down to 200mbps than have to deal with that on a regular basis.

 

[SFW007]

Just so there's no confusion as someone already asked - WS isn't imposing connection or throughput limits or shaping or anything like that.

SABnzbd is, for whatever reason, generating enough packets per second on a gigabit line to trigger the upstream DDoS protection software, which then cuts off the source IP from the internet for a few minutes. So any time a download happens on my side, I get disconnected. Lacking any other kind of solution, I'd rather go back down to 200mbps than have to deal with that on a regular basis.

Thanks for the explanation,

Do you really need gigabit then , if you downgrade to 200 etc you are still going to get your download albeit i min or 2 longer but with fewer hassles.

I contemplated upgrading to 100 from 50 , i download HD torrents using a seedbox for obviously seeding and Sonarr with deluge and jacket linked to rarbg and mtv(tv series) all automated, my movies are from BeyondHD +- 40 gigs as quality is everything for my projector and audio setup.

2cents

 

[Sopbeen]

Just so there's no confusion as someone already asked - WS isn't imposing connection or throughput limits or shaping or anything like that.

SABnzbd is, for whatever reason, generating enough packets per second on a gigabit line to trigger the upstream DDoS protection software, which then cuts off the source IP from the internet for a few minutes. So any time a download happens on my side, I get disconnected. Lacking any other kind of solution, I'd rather go back down to 200mbps than have to deal with that on a regular basis.

Have you tested any other apps? Or do they all hit the limiter?

 

[Seeyou]

Have you tested any other apps? Or do they all hit the limiter?

There aren't really too many options but yes, I've tried NZBget with the same results.

 

[buyeye]

I would just set a limit on the nntp app and enjoy the rest of the line speed with other services.

 

[Seeyou]

I would just set a limit on the nntp app and enjoy the rest of the line speed with other services.

Honestly gigabit (at least for me, on Octotel's questionable network) is hardly noticeable outside of multi threaded downloads. Steam, Origin, Epic, HTTP downloads and torrents hardly go higher than what I was seeing at 200mbps. Probably makes sense to downgrade, I just ended up at 1gbps through a series of unique events

 

[buyeye]

Honestly gigabit (at least for me, on Octotel's questionable network) is hardly noticeable outside of multi threaded downloads. Steam, Origin, Epic, HTTP downloads and torrents hardly go higher than what I was seeing at 200mbps. Probably makes sense to downgrade, I just ended up at 1gbps through a series of unique events

I'm only on half your speed but my steam updates that are only a few hundred meg update so fast that I have not had to wait more than a few seconds.

I don't have game pass currently as I normally play on the Xbox with friends when they visit.

I'm excited for games to download in the time it takes to make a snack. You know how big xbox games are now.

 

[DarkSt0rm]

Is there really nothing that can be done with those blizzard EU routes (185.60.112.157 & 185.60.112.158)? I'm having to play over a VPN otherwise the packet loss that side makes the game unplayable. Its been like that for the past week between 1900 and 2300.