PDA

View Full Version : Why was the forum down?



Richard_Rides
06-17-08, 10:35 AM
Evening of June 16 to Morning of June 17. Looked like a DoS attack...

mstrpete
06-17-08, 11:19 AM
...Looked like a DoS attack...

If that means "I couldn't get to the site for love or money", then yeah that. What happened?

cuda2k
06-17-08, 11:49 AM
http://www.bikeforums.net/showthread.php?goto=newpost&t=430522

It appears that the Internet Brands servers have been having technical difficulties for the last several days/weeks. While I don't have a lot of details, I suspect what ever was being kinda flaky, finally up and just gave up the ole ghost. Somehow we go though a lot of server hardware, can't quite figure that one out being a software developer myself, but haven't seen the guts of the forum software nor database to see just how much of a pounding it puts on the hardware either.

Roody
06-17-08, 12:39 PM
Well, they evidently had stuff backed up pretty well. I don't see any problems on it right now.

Richard_Rides
06-17-08, 12:48 PM
One of their machines, a router or a firewall was sending TCP resets back down against incoming traffic. This is countermeasure against TCP SYN floods and other resource swamping attacks. There was quite a war being waged, it was DEFINITELY NOT a situation where a device simply failed. I don't know the network topology, but I'd guess that BikeForums was under attack and the upstream bandwidth provider was defending.

Rollfast
06-17-08, 07:41 PM
http://www.bikeforums.net/showthread.php?goto=newpost&t=430522

It appears that the Internet Brands servers have been having technical difficulties for the last several days/weeks. While I don't have a lot of details, I suspect what ever was being kinda flaky, finally up and just gave up the ole ghost. Somehow we go though a lot of server hardware, can't quite figure that one out being a software developer myself, but haven't seen the guts of the forum software nor database to see just how much of a pounding it puts on the hardware either.

I think an honest answer may be dealing with the fact these forums have well beyond 3x the membership of another very popular forums site known for *some* pains early on, Audiokarma.org.

We seem to have been a bit better handled than they were in those early days--I was there and know.

Rollfast
06-17-08, 07:51 PM
One of their machines, a router or a firewall was sending TCP resets back down against incoming traffic. This is countermeasure against TCP SYN floods and other resource swamping attacks. There was quite a war being waged, it was DEFINITELY NOT a situation where a device simply failed. I don't know the network topology, but I'd guess that BikeForums was under attack and the upstream bandwidth provider was defending.

Thank you for the the interesting information, Richard, and it does make sense to me. I suspect without making any stabs at it, that IB may have a large media contract or two and that the BF servers were a collateral hit in an attack on that other account.

If you want to investigate James Bond may have to shake you and stir :D

Rollfast
06-28-08, 01:56 AM
Thank you for the the interesting information, Richard, and it does make sense to me. I suspect without making any stabs at it, that IB may have a large media contract or two and that the BF servers were a collateral hit in an attack on that other account.

If you want to investigate James Bond may have to shake you and stir :D

I need to update and clarify that I know TWO companies referred to by the letters 'IB' and I have discovered THIS ONE isn't that one.

That one is still in a lot of hot water for employees leaking Tim Russert's death news before the family could be notified, but WE hardly have those problems!

For what that was worth?