• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Solved [Solved] update.freebsd.org slow or not responding

SirDice

Administrator
Staff member
Administrator
Moderator

Thanks: 5,506
Messages: 25,687

#1
Looks like there's some issue between HE and ISC. The transition from HE to ISC causes some huge delays which in turn causes time-outs with freebsd-update(8). Is anybody else seeing that too?

Code:
traceroute -n update.freebsd.org
traceroute to update2.freebsd.org (149.20.53.26), 64 hops max, 52 byte packets
 1  37.252.124.1  0.820 ms  0.715 ms  0.575 ms
 2  164.138.24.46  0.793 ms  0.759 ms  0.623 ms
 3  164.138.24.36  0.224 ms  0.207 ms  0.215 ms
 4  193.239.116.14  5.004 ms  10.331 ms  0.678 ms
 5  72.52.92.213  6.754 ms  6.668 ms  14.636 ms
 6  72.52.92.166  70.218 ms  64.738 ms  64.245 ms
 7  184.105.80.37  90.697 ms  85.784 ms  85.972 ms
 8  184.105.222.173  122.993 ms  122.938 ms  127.351 ms
 9  * * *
10  * * *
11  * * 149.20.65.21  998.370 ms
12  * * 149.20.65.22  1225.841 ms
13  * * 149.20.65.10  1302.238 ms
14  149.20.49.196  43454.694 ms * *
15  * 149.20.53.26  1249.411 ms *
Different VPS at a different provider:
Code:
traceroute -n update.freebsd.org
traceroute to update2.freebsd.org (149.20.53.26), 64 hops max, 52 byte packets
 1  37.34.62.220  0.447 ms  5.764 ms  0.418 ms
 2  195.69.145.150  3.982 ms  2.583 ms  0.776 ms
 3  184.105.213.102  22.501 ms  10.407 ms  15.627 ms
 4  184.105.213.93  89.143 ms  90.163 ms  88.435 ms
 5  184.105.213.110  100.645 ms  100.630 ms  100.720 ms
 6  * * *
 7  * * *
 8  149.20.65.37  435.146 ms * *
 9  * * *
10  * * 149.20.49.196  856.270 ms
11  149.20.53.26  694.193 ms  510.656 ms  477.890 ms
Same massive delays between HE and ISC and sometimes doesn't even trace at all.
 

SirDice

Administrator
Staff member
Administrator
Moderator

Thanks: 5,506
Messages: 25,687

#2
Re: update.freebsd.org slow or not responding

Wow, that was quick. Received a reply from ISC's NOC:
This instability was due to a DDoS being directed at one of our clients. Mitigation measures have been deployed and things should be returning to stable. Sorry for the inconvenience.
 

usdmatt

Daemon

Thanks: 419
Messages: 1,210

#3
Re: update.freebsd.org slow or not responding

I had a lot of trouble getting on the forums yesterday. Traceroute also stopped at he.net for me. I actually tried to reply to this post then but gave up.

Forums still seem sluggish for me today although it's not actually timed out on me yet.
 

DutchDaemon

Administrator
Staff member
Administrator
Moderator

Thanks: 2,490
Messages: 11,095

#4
Re: update.freebsd.org slow or not responding

These servers are in the ISC network, which is currently battling a DDoS targeting the .il name servers (one of which is hosted by ISC -- there's also a .ua name server in there, to make things more challenging). Admins are trying to take any ISC servers out of address pools, but not all services are currently multi-homed.
 

bsdkeith

Active Member


Messages: 122

#5
Re: update.freebsd.org slow or not responding

Forum was slow for me too, but seems to have improved. Many thanks to those of you involved with rectifying these problems.
 

SirDice

Administrator
Staff member
Administrator
Moderator

Thanks: 5,506
Messages: 25,687

#6
Re: update.freebsd.org slow or not responding

It seems to have cleared up now, got a final message from ISC:
(Please note: this is a bulk response, but you can reply to this ticket to raise its priority).

We apologize for our recent network outage.

Beginning at 2 AM Pacific time yesterday, most if not all, of the links serving ISC were saturated with DDoS attack traffic targeted at one of our Hosted@ and SNS-Public Benefit customers.
We're largely back on-line, as of late last evening yesterday. We communicated that out to our Hosted@ customers via the "noc-notice", and in response to tickets we've received. We're coordinating with Law Enforcement and other affected parties (such as other providers who also host this customer, who were also attacked).

We have had offers of help from many quarters: we would especially like to thank our partners and friends at Hurricane Electric and NTT for their assistance.

If you believe your service to/from/at ISC (including hosted equipment, peering sessions, physical links, or other such items) are still adversely affected, please reply to this ticket to raise its priority. We’ve been handling many requests and believe that most are resolved with the subsided traffic levels, but we’re happy to help clear up any residual issues.