Mailing List Archive

The Internet is down.
Ok, clearly that's not what's actually happening, but nearly every graph on
the home page of downdetector.com started spiking on the same curve around
2200EDT, and they've not started coming down yet; 250k+ reports for YouTube.

Someone break a core IX somewhere?

Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
Youtube is back. Pornhub never went down :)

> On May 18, 2021, at 20:35, Jay R. Ashworth via Outages <outages@outages.org> wrote:
>
> ?Ok, clearly that's not what's actually happening, but nearly every graph on
> the home page of downdetector.com started spiking on the same curve around
> 2200EDT, and they've not started coming down yet; 250k+ reports for YouTube.
>
> Someone break a core IX somewhere?
>
> Cheers,
> -- jra
> --
> Jay R. Ashworth Baylink jra@baylink.com
> Designer The Things I Think RFC 2100
> Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
> St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
YouTube is indeed glitching significantly

-George

Sent from my iPhone

> On May 18, 2021, at 8:35 PM, Jay R. Ashworth via Outages <outages@outages.org> wrote:
>
> ?Ok, clearly that's not what's actually happening, but nearly every graph on
> the home page of downdetector.com started spiking on the same curve around
> 2200EDT, and they've not started coming down yet; 250k+ reports for YouTube.
>
> Someone break a core IX somewhere?
>
> Cheers,
> -- jra
> --
> Jay R. Ashworth Baylink jra@baylink.com
> Designer The Things I Think RFC 2100
> Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
> St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
Someone didn't feed the hamsters, and they went on strike. :-)

I didn't notice anything bad in .AU, and no loss of traffic into or
out of my little island of the internet.

Spikes appear to be dropping back now, so whatever it was, it was brief.

DaZZa

On Wed, 19 May 2021 at 13:35, Jay R. Ashworth via Outages
<outages@outages.org> wrote:
>
> Ok, clearly that's not what's actually happening, but nearly every graph on
> the home page of downdetector.com started spiking on the same curve around
> 2200EDT, and they've not started coming down yet; 250k+ reports for YouTube.
>
> Someone break a core IX somewhere?
>
> Cheers,
> -- jra
> --
> Jay R. Ashworth Baylink jra@baylink.com
> Designer The Things I Think RFC 2100
> Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
> St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages



--
veg·e·tar·i·an:
Ancient tribal slang for the village idiot who can't hunt, fish or ride
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
----- Original Message -----
> From: "Jay R. Ashworth via Outages" <outages@outages.org>
> Sent: Tuesday, May 18, 2021 11:25:04 PM

> Ok, clearly that's not what's actually happening, but nearly every graph on
> the home page of downdetector.com started spiking on the same curve around
> 2200EDT, and they've not started coming down yet; 250k+ reports for YouTube.
>
> Someone break a core IX somewhere?

If they did, they got it fixed in half an hour or so.

Very curious, though, that all those tests all spiked at the same time.

(Correction: 125K for Youtube, not 250K; Jay regrets the error.)

Cheers,
-- jra

--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
Given the current world events, wouldn't be surprised if a Nation State was
trying to do some censorship and fat fingered their peering links.

--Damian

On Wed, May 19, 2021 at 11:57 AM Jay R. Ashworth via Outages <
outages@outages.org> wrote:

> ----- Original Message -----
> > From: "Jay R. Ashworth via Outages" <outages@outages.org>
> > Sent: Tuesday, May 18, 2021 11:25:04 PM
>
> > Ok, clearly that's not what's actually happening, but nearly every graph
> on
> > the home page of downdetector.com started spiking on the same curve
> around
> > 2200EDT, and they've not started coming down yet; 250k+ reports for
> YouTube.
> >
> > Someone break a core IX somewhere?
>
> If they did, they got it fixed in half an hour or so.
>
> Very curious, though, that all those tests all spiked at the same time.
>
> (Correction: 125K for Youtube, not 250K; Jay regrets the error.)
>
> Cheers,
> -- jra
>
> --
> Jay R. Ashworth Baylink
> jra@baylink.com
> Designer The Things I Think RFC
> 2100
> Ashworth & Associates http://www.bcp38.info 2000 Land
> Rover DII
> St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647
> 1274
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages
>
Re: The Internet is down. [ In reply to ]
----- Original Message -----
> From: "Damian Guppy" <the.damo@gmail.com>
> Sent: Wednesday, May 19, 2021 12:10:16 AM

> Given the current world events, wouldn't be surprised if a Nation State was
> trying to do some censorship and fat fingered their peering links.

Not impossible, and part of the reason I posted it. Multiple focal centers
generally denote an attack -- though the topology of the Internet can make it
difficult to discern whether there were in fact multiple focal centers -- no
doubt Renesys, and some of our regulars here, will have more data.

Which we'll put on -discussion. :-)

Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
_______________________________________________
Outages mailing list
Outages@outages.org
https://puck.nether.net/mailman/listinfo/outages
Re: The Internet is down. [ In reply to ]
Any time one of the Alexa top 10 sites has an outage, you can expect to see
a ripple effect of errors reported to DownDetector across other unrelated
sites.
[image: 20210518.png]

For example:
- when users can't get to any major service, they often blame their ISP,
accounting for the spikes to Spectrum, Comcast, Cox, AT&T, Verizon,
T-Mobile, CenturyLink, Frontier
- those eyeballs have to go somewhere, so they're going to visit other
services, leading to a surge of traffic to them. A fixed percentage error
rate will lead to a surge in errors corresponding to the surge in usage.
This may account for the spikes to Reddit, Netflix, Xbox Live, Discord,
Roku, Twitter, Facebook, Cloudflare, and Snapchat

Figuring out whether you're looking at a ripple effect, or a nation-state
attack on a core router, is left as an exercise for the reader. In this
case, it was just a YouTube issue:
https://twitter.com/TeamYouTube/status/1394862840960327680

Damian

On Tue, May 18, 2021 at 9:43 PM Jay R. Ashworth via Outages <
outages@outages.org> wrote:

> ----- Original Message -----
> > From: "Damian Guppy" <the.damo@gmail.com>
> > Sent: Wednesday, May 19, 2021 12:10:16 AM
>
> > Given the current world events, wouldn't be surprised if a Nation State
> was
> > trying to do some censorship and fat fingered their peering links.
>
> Not impossible, and part of the reason I posted it. Multiple focal centers
> generally denote an attack -- though the topology of the Internet can make
> it
> difficult to discern whether there were in fact multiple focal centers --
> no
> doubt Renesys, and some of our regulars here, will have more data.
>
> Which we'll put on -discussion. :-)
>
> Cheers,
> -- jra
> --
> Jay R. Ashworth Baylink
> jra@baylink.com
> Designer The Things I Think RFC
> 2100
> Ashworth & Associates http://www.bcp38.info 2000 Land
> Rover DII
> St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647
> 1274 <(727)%20647-1274>
> _______________________________________________
> Outages mailing list
> Outages@outages.org
> https://puck.nether.net/mailman/listinfo/outages
>