HE抽风动向

domin

There is always something they can do, they are just not willing to do it due to other reasons.
I still don't get it though, what the hell is "the attacking were on China Telecom, and China Unicom bordering IPs" suppose to mean, are they saying CT/CU's router been attacked? I highly doubt that.

rakswift

We have been in HE data center (Fremont 2, Warmspring Avenue), and Coresite Data Center (San Jose), setting up our new servers..

When I talked to Jean (HE engineer), it's clear that the attacking were on China Telecom, and China Unicom bordering IPs.. When the DDOS attacks were out of HE network, there is nothing they could do.

It's up to China Tele and Unicom to resolve them, unfortunately. HE is talking to Cisco, and check if there is anything they could do to config their core routers to minimize the impact.

SalesHosting

rakswift 发表于 2012-2-3 11:43
We have been in HE data center (Fremont 2, Warmspring Avenue), and Coresite Data Center (San Jose),  ...

The may can just simple block the IP. I am confused if the attacked IP is not under HE AS so who is the target?

by the way, which Corsite Datacenter you're in? One wilshire ?

rakswift

If you look the testing data, the congestion is primarily for China Telecom network. China Unicom, and China Mobile network speed to HE is NO PROBLEM..

So the DDOS at this moment is primarily centered on China Telecom network

We are in Coresite Silicon Valley Data Center (not One Wilshire in LA).

The center of the network is shifting from LA to Silicon Valley, because Google, FB etc are in Silicon Valley. Please check out ::::  CoreSite’s New Santa Clara Data Center at 2972 Stender Way

FB is there. It's beautiful, and totally THE BEST DATA CENTER in the world. PUE @1.15.. Amazing!!!

SalesHosting

rakswift 发表于 2012-2-3 12:00
If you look the testing data, the congestion is primarily for China Telecom network. China Unicom, a ...

You use racks, cages or private suite? May I know how much?

domin

rakswift 发表于 2012-2-3 12:00
If you look the testing data, the congestion is primarily for China Telecom network. China Unicom, a ...

Just want to know who exactly been attacked? HE client IP or router IP?
Looking at the traceroute, the congestion is between CT and HE(hop 9 and 10).

3  124.74.182.149  0.378 ms  0.386 ms  0.403 ms
4  61.152.80.1  0.533 ms  0.549 ms  0.564 ms
5  61.152.86.46  1.162 ms  1.163 ms  1.217 ms
6  202.97.33.58  20.351 ms  19.945 ms  19.939 ms
7  202.97.33.54  1.828 ms  1.740 ms  1.733 ms
8  202.97.50.122  136.108 ms  135.995 ms  135.854 ms
9  202.97.49.158  253.371 ms  253.452 ms  253.451 ms
10  64.71.131.133  404.227 ms  403.568 ms  403.709 ms
11  72.52.92.21  386.889 ms  387.048 ms *
12  72.52.92.70  381.692 ms  381.002 ms  381.072 ms

SalesHosting

domin 发表于 2012-2-3 12:05
Just want to know who exactly been attacked? HE client IP or router IP?
Looking at the traceroute, ...

你别问那哥们了，我去问HE吧。

domin

SalesHosting 发表于 2012-2-3 12:07
你别问那哥们了，我去问HE吧。

嗯
如果真是他们不作为. 联合起来抵制.
他们的端口到期后我是不会续了.

rakswift

we have our own cages in Coresite.

regarding HE, they are a LOW COST provider. I understand you are upset with their services. On the other hand, they are the cheapest in the market. So the cost/service is fair.

You are right, the attack is between China T & HE border. HE has never experienced this kind of problem before, so it will take a bit time for them to figure a solution

domin

rakswift 发表于 2012-2-3 12:16
we have our own cages in Coresite.

regarding HE, they are a LOW COST provider. I understand you ar ...

It's not the first time they have seen this. I have personally submitted tickets to them before helped fixing routing issues with Chinese networks. It's kinda difficult to get them fix stuff unless you provide a lot of evidence.