Live data from Hacker News

Ask HN: Best “I brought down production” story?

news.ycombinator.com

161–170 of 301 posts

Re: Ask HN: Best “I brought down production” story?

#161
How about breaking all e-mail across the entire world back in 1996?

This one got a write up at The Register: https://www.theregister.com/2018/04/16/who_me/

The story as i told it to them is slightly different. They made some changes that I think do make it a better story, but not quite as close to the truth of the situation as I remember it.

I think that’s my biggest mistake so far.

Re: Ask HN: Best “I brought down production” story?

#162

The deployment process for a site I used to work on would entail changing the owner of a folder. You would change the owner from the web server to your user, upload files, and then change it back. sudo chown -R www-data:www-data [folder] I’d made some changes and was ready to update the owner only I was inside the folder that needed updating. In the moment I decided the correct way to refer to that folder was / I not…

chown and chmod on root by accident is such a common fuckup. i've done it on my personal linux desktop before.

Re: Ask HN: Best “I brought down production” story?

#163

I'm in the fortunate position of having been able to tell our story in detail on our blog after a major outage involving Cassandra and bootstrap behaviour that we didn't fully understand. This is a story of how I bought down the bank for two hours. https://monzo.com/blog/2019/09/08/why-monzo-wasnt-working-on... In summary, we were scaling up our production Cassandra data store and we didn't migrate/backfill the data…

I have a Cassandra story as well. At a previous employer our org used a database that was a custom wrapper around Cassandra. This was a fairly large organization and this particular database was the keystone to the vast majority of operations of this particular organization. Well, one day I was giving a demo to some junior devs on how to use the REST API for the database which just so happened to take in raw Solr queries. I always liked to point that out to the newer devs as a way they could do some nice things that were otherwise fairly limited by the REST API.

Well, one of the junior devs just so happened to be playing around with various different Solr queries to see what he could get back and somehow issued a query that caused the entire staging database to fall over. That was a fun phone call to get. It wasn’t the junior dev’s fault, of course, but it really did wonders to expose the fragility of poorly optimized/unindexed queries against the database.

My experience in general with Cassandra is that outside of a few experts working with it, it was pretty poorly understood throughout the org and no one except those select people could really do anything when it all fell over.

Re: Ask HN: Best “I brought down production” story?

#164

I'm a guy in two person startup team, mostly handle the technical stuff. Woke up to see some error on our main work machine, which also hosts some of the services, after a sudo apt update. Wasn't the first time and was usually able to fix by just googling what the error is as on SO and running it. Did it again, told me to uninstall nvidia drivers, proceeded to do so, and bricked my hard disk. Was completely gut wrenc…

Very curious what you mean by "bricked the hard disk"?

After the bios screen screen would go black as it tries to load what I assume is the os.

Then after a really long time an error message shows up, something like Acpi error, namespace lookup failure, Ae_not_found

Then it goes back to bios and tries again.

What I suspect happened is removing the nvidia driver led to some sort of circular dependency or lock on the system. This was when Ubuntu 20 first came out and official Ubuntu 20 cuda and nvidia drives weren't out yet so I was using ones for Ubuntu 18. Never figured it out...

Re: Ask HN: Best “I brought down production” story?

#165
At ITA Software, we had servers that the customer airlines would connect to, and they would sometimes get TCP connection resets for no apparent reason. (This was back in the 'aughts, when companies still ran their own servers.) ITA had bought a super-expensive router with back-up power supplies and lots of administration features.

So, we configured logging. Mysteriously, resets increased the next day. So we added more logging. On the third day, the whole system collapsed. Turns out the resets were coming from the super-expensive router itself because it was getting overloaded. More logging meant more load. Ooops!

After that, ops needed CEO approval to turn on any logging. Good times!

Re: Ask HN: Best “I brought down production” story?

#166
At a $job, I took down prod once and restored it twice after the database got emptied. Well, we didn't quite empty it - I imported an old dump into prod instead of a test database while trying to replicate an issue. My coworker, on the other hand, was running some script he had written to truncate a few tables... and ended up running TRUNCATE individually on every single table in the database.

They've been good tests of our backup systems, actually. In fact, one of the incidents revealed that our on-site backups had been broken for ~a couple of weeks. (Our off-sites use a different backup system and were fine, but we restored that gap from binlog instead, as they were still present locally and it was faster than the 100Mbps upload from our off-site...)

Each one was 15-20 minutes of downtime.

Re: Ask HN: Best “I brought down production” story?

#167

Earlier quoted context omitted.

> The person responsible for the systemic failure should see the consequences You don't see the contradiction of terms there? A systemic failure is by definition not the responsibility of one person. You're saying people should be able to make mistakes. But not those people.

Having worked in a very large, bureaucratic company I can say that I strongly suspect that just ignoring systemic failures as learning opportunities is also not a sustainable. Too many times I’ve had to yield on something and say “I guess they’ll learn when this fails” only to see them easily move on or get promoted before the failure occurs. They don’t learn their lessons. I suspect the solution is to find a way to…

It's not that you ignore them. But your first step if someone makes a mistake should not be to fire them. Maybe they need some coaching, maybe they have too much access or authority, but everyone makes mistakes. The key is whether or not they learn from them, or keep making them.

Re: Ask HN: Best “I brought down production” story?

#168

Not me, but someone pinged out slack chat asking for us to "please revert". We didn't realize the issue until he admitted that he had run an update on the full user table (forgot a where clause) and every single email was now being funneled into his email account.

This is a fairly common theme in discussions about outages and production incidents. I'm surprised at this point with various SQL servers there's no simple ACL to the effect of "can run UPDATE, but must include a WHERE clause" or "Can run UPDATE constrained to x rows, will error if more are selected". Obviously there are times where this will be intended but I think "UPDATE ALL ROWS" is a pretty rare requirement.

Re: Ask HN: Best “I brought down production” story?

#169
post #105

Earlier quoted context omitted.

I oversaw a Solaris machine for a very short period, and never got any reason to use it. But if you can change the signal, sending SIGHUP into everything looks like reasonable thing to do. Still, it's not something common enough to deserve it's own program.

Yep, and as weird as killall on solaris is-- the naming of killall on linux is kinda weird. It's "killbyname".

I don’t know? ‘Killall node’ sounds like kill all node processes to me.

Re: Ask HN: Best “I brought down production” story?

#170
post #27

Nothing crazy, but something I always laugh at. I was so excited to meet a legit/professional dev team the first day of my career. I was paired with a Sr dev and sat in his cubicle so he could show me some backend update to a prod app with 20K internal users... "normally I'd run this on the dev server, but, its quick & easy so Ill just do it on prod" ...watched him crash the whole thing & struggle the rest of the day…

The amount of "yep, I know" I have to do any time anything goes down... at least Sales usually only has one person report it to me, other teams 3 different people will tell me at the same time...
Post reply on HN