Upstream NOC DDOS

Posted Jan. 02, 2019 by: wilhelms

Notification from NOC:

We had a DDOS attack that resulted in overutilization of the routing table. The DDOS attack was mitigated but following the attack an sfp connecting to the router partially failed and was only sending one way traffic. Since the sfp didn't completely fail we didn't get alarms on which sfp port was partially failing and therefore it was very difficult to locate. We were both reviewing the changes made to mitigate the DDOS attack and looking for equipment failure. We were able to find the sfp routing traffic 1 way and replaced it with a new sfp. All systems should be fully restored. We worked long and late to restore services as quickly as possible.