Upcoming IP changes, and information about the recent attack
Posted: Thu Jul 10, 2003 2:53 am
Ok guys,
Well this should have been written earlier, but i've been swamped, and exhausted from the work.
As many had noticed, there were intermittent connectivity issues on 07/08/2003 in the early morning. This was the result of a large DDoS attack that had overwhelmed the upstreams routers. As a result, everytime the routers were brought back up, they overloaded and became unresponsive. Eventually the attacks were filtered, the ip's being assaulted were blacklisted, and the target was found.
Unfortunatly it seems the attackers were intent on shutting down demodemo.com (they sell flash tutorials for control panels for anyone who doesne't know them). The owner of DemoDemo.com has opted to have his sites moved to a server of his own on a private line, 100% independant of our connectivity. As a result, further attacks against Vito will be properly filtered outside our network, and things should return to normal basically.
In addition to this, while we submitted an ARIN request for our own IP zone thus we may stop outsourcing our bgp routing to someone larger, it was denied. In light of this we've arranged for another 100mbps circuit from Peer1 Networks, which will provide us with essentially a de-aggregated block of IP addresses, and will allow us to *completely* control our own routing on these blocks through our own bgp routing.
We will be providing each customer with IP addresses to renumber into. Basically the new IP's will have an added backup in comparison to the current IP addresses, and may also have slightly different routing configurations/peers. Both sets of IP addresses will remain 100% active while people are numbering over, customers will be provided several months to move their sites over to the new IP addresses.
Well this should have been written earlier, but i've been swamped, and exhausted from the work.
As many had noticed, there were intermittent connectivity issues on 07/08/2003 in the early morning. This was the result of a large DDoS attack that had overwhelmed the upstreams routers. As a result, everytime the routers were brought back up, they overloaded and became unresponsive. Eventually the attacks were filtered, the ip's being assaulted were blacklisted, and the target was found.
Unfortunatly it seems the attackers were intent on shutting down demodemo.com (they sell flash tutorials for control panels for anyone who doesne't know them). The owner of DemoDemo.com has opted to have his sites moved to a server of his own on a private line, 100% independant of our connectivity. As a result, further attacks against Vito will be properly filtered outside our network, and things should return to normal basically.
In addition to this, while we submitted an ARIN request for our own IP zone thus we may stop outsourcing our bgp routing to someone larger, it was denied. In light of this we've arranged for another 100mbps circuit from Peer1 Networks, which will provide us with essentially a de-aggregated block of IP addresses, and will allow us to *completely* control our own routing on these blocks through our own bgp routing.
We will be providing each customer with IP addresses to renumber into. Basically the new IP's will have an added backup in comparison to the current IP addresses, and may also have slightly different routing configurations/peers. Both sets of IP addresses will remain 100% active while people are numbering over, customers will be provided several months to move their sites over to the new IP addresses.