Twitter Down

[Patrick]

Looks like Twitter is still down! Yikes.

 

[dicecca112]

Wasn't down for me earlier (I'm in Boston), but is now and has been since 12PM EST

 

[T_Minus]

I've noticed a # of "big sites" down today, and lots of news of attacks etc...

 

[ttabbal]

I read about a DDOS against a DNS provider causing problems for a lot of people.

 

[xnoodle]

Yep dyn is getting ddosd. Happened twice so far today.

Sent from my SAMSUNG-SM-G935A using Tapatalk

 

[Patrick]

Down again here Popular sites like Reddit, Twitter and Netflix suffer outages

 

[wsuff]

Seems GitHub moves to Route53 for DNS as problems appear to be on/off most of the day.
GitHub System Status
I didn't even consider some zones have pretty high NS TTL so it can take some time to even attempt to migrate issues like this.

 

[xnoodle]

This incident has been resolved.
Posted 7 minutes ago. Oct 21, 2016 - 22:17 UTC

Dyn, Inc. Status - DDoS Attack Against Dyn Managed DNS

Resolved.. for now.

 

[TuxDude]

Seems GitHub moves to Route53 for DNS as problems appear to be on/off most of the day.
GitHub System Status
I didn't even consider some zones have pretty high NS TTL so it can take some time to even attempt to migrate issues like this.

Long TTLs will make any attempt to migrate away from the issue difficult, but at the same time they should also allow all of the other DNS servers to cache the results - if my ISP has cached the lookup for whatever name it shouldn't matter that Dyn is getting attacked. Considering the very distributed cache-friendly* nature of DNS I'm quite surprised by the impact this had.


* When I say 'cache-friendly', I mean more that is has extensive caching built right into the protocol, to the point that the caching almost causes more problems than it solves, so people turn down TTL's to work around the cache issues, which then makes them vulnerable to an attack like this.

 

[wsuff]

Very well put.