rssLink RSS for all categories
 
icon_red
icon_green
icon_red
icon_red
icon_blue
icon_green
icon_green
icon_red
icon_red
icon_red
icon_orange
icon_green
icon_green
icon_green
icon_green
icon_blue
icon_green
icon_orange
icon_red
icon_green
icon_red
icon_red
icon_green
icon_red
icon_red
icon_red
icon_red
icon_orange
icon_green
 

FS#4684 — FS#8615 — cdns on RBX1

Attached to Project— Network
Maintenance
Whole Network
CLOSED
100%
During mitigation, attacks on some RBX1 customers
have revealed a routing problem between CDNS
213.186.33.99 and RBX1: the packets leave the
internal routing in order to pass outside the DC,
then re-enter the DC again. Not a serious issue in normal
time, but it's affecting the servers undergoing mitigation
tests, as these packets pass through the mitigation and
mix with the DNS AMP attacks thus filtered.

This problem is linked to the RBX1 routing architecture
which dates back to 2006 and is very flexible. RBX1
routing will be upgraded in June.

RBX2/3/4/5 have not been affected thanks to an
internal network that joins all the DC routers
together, including these sites: BHS, RBX, SBG.
All this traffic remains internal, except RBX1 which
is not configured in the same way as the rest, and
cannot be changed without causing 2hrs downtime.

In the meantime, we have done a fix
by put the dedicated CDNS in place in RBX1.

The server is obviously too weak to
withstand all the RBX1 requests. We are in the process
of upgrading it onto a more powerful server.
Date:  Friday, 31 May 2013, 16:36PM
Reason for closing:  Done