May 2, 2006 - Large DDoS

[michael_s]

We are currently being hit by a 1 Gb/s+ DDoS attack that is overwhelming our anti-DDoS gear. We are working with the vendor, and will update as more information becomes available.

[michael_s]

At this point, it appears that the large scale DDoS we were hit with triggered a software problem within the release of code running on our Toplayer gear. After working with toplayer, we have been able to get the network stable and have mitigated the effects of the attack. Toplayer is supplying us with a newer version of the code to address these problems for good.

[michael_s]

Issue has re-appeared prior to Top Layer supplying updated firmware for the units. Currently working with them to mitigate the attack. New firmware update expected to be in place sometime today.

[michael_s]

We have tracked down the problem. This was a very large attack against our network, to the tune of approx. 400,000 packets per second. It appears that the toplayer devices were not "seeing" the traffic, due to unknown characteristics of the attack. Once the target was discovered, we dropped packets at our border destined for the target, and service is now back to normal. More information will be made available this afternoon, once we receive the updates from toplayer and we have had time to evaluate the current data.

[michael_s]

This work has been completed (Toplayer update). A full summary will be made available tomorrow. We thank you for your patience.