Live data from Hacker News

An Update on Our Outage

blog.roblox.com

31–40 of 235 posts

Re: An Update on Our Outage

#31
Someone on here posted the other day that someone they knew at Roblox said it was their secret store that became overloaded. Presumably a Hashicorp Vault type service (or something similar.) This update appears to support that claim.

That's definitely a problem you only get at scale.

Re: An Update on Our Outage

#33
My heart goes out to the people who likely had to work crazy hours to fix this, but it really is wild that it was down for so long. What was the last service of this size that was down for 4 days? That is a failure in architecture that goes way beyond whatever the specific cause was here. That post-mortem is going to be a doozy.

Re: An Update on Our Outage

#35

Earlier quoted context omitted.

What does that tend to look like? Do you have any examples?

In my experience, it tends to be that you find out one of your components has some tipping point as you scale out horizontally where everything goes to hell. Random example: you scale a service horizontally and suddenly postgres disk space usage goes from "this line looks horizontal" to "we just used 2 years' worth of disk use growth in 40 seconds". And the postmortem is basically like "yep can't really blame anyone…

This totally happens, and is a thing, but tracing a "unexpected change in metrics on our DB server to "increase in metric showing call volume to DB server" to "increase in metric showing increase in fleet size of app servers that call the DB server" takes minutes to identify, not 24 hours.

And the remediation procedure is quite simple too - scale down. If the fleet can't handle it, increase your throttling. If even with increased throttling you can't handle the load and everybody's timing out (but you still can't scale out), you start spinning up new load balancers, and applying weights in DNS where at least some percentage of your callers are getting through while others see full failure.

The key point is in anything related to such an outage, even if it takes a long time to recover, your customers shouldn't see a full outage.

So it was either an entirely different class of problems or Roblex has a huge ops skills gap. I'm betting the former.

edit: never mind, maybe it's the latter after all: https://twitter.com/NIDeveloper/status/1454773313792880640

Re: An Update on Our Outage

#36
post #22
post #15

Earlier quoted context omitted.

My guess is something related to service mesh/discovery. If that goes down, deployment infra also depends on it, and you don't have a solid black start protocol then you're in for a very bad week.

That or DNS. ;-)

Or maybe BGP >:)

Re: An Update on Our Outage

#37
post #22
post #15

Earlier quoted context omitted.

My guess is something related to service mesh/discovery. If that goes down, deployment infra also depends on it, and you don't have a solid black start protocol then you're in for a very bad week.

That or DNS. ;-)

Service mesh is basically abstracted DNS, so…

Re: An Update on Our Outage

#38
post #4

Huh, strangely the link doesn't open for me. Seems like an infinite redirect loop. $ curl -i -L https://blog.roblox.com/2021/10/update-on-our-outage/ HTTP/1.1 301 Moved Permanently Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 0 X-Redirect-By: WordPress Location: https://blog.roblox.com/2021/10/update-on-our-outage/ X-Powered-By: WP Engine X-Cacheable: bot X-Cache-Group: bot Strict-Transport-Se…

Looking forward to and incident analysis of why their incident analysis post wasn't posted correctly.

Re: An Update on Our Outage

#39
post #26

As most of the Roblox community is aware, we recently experienced an extended outage across our platform. We are sorry for the length of time it took us to restore service. A key value at Roblox is “Respect the Community,” and in this case, we apologize for the inconvenience to our community. On Thursday afternoon, October 28th, users began having trouble connecting with our platform. This immediately became our high…

Thank you for posting the text of the blog post. However, I don't understand your TLDR. They clearly were able to identify the root cause, and that is what allowed them to restore service.

I mean this is honestly a PR/lawyer blog post.

> A core system in our infrastructure became overwhelmed, prompted by a subtle bug in our backend service communications while under heavy load.

Translation Something important went down, we couldn't trace the bug.

>This was not due to any peak in external traffic or any particular experience.

Translation We're not blaming Chipotle for this

> most services at Roblox were unable to effectively communicate and deploy.

Translation We couldn't throw more compute at the problem to manage the traffic or to put up a failover copy of anything.

>To the best of our knowledge, there has been no loss of player persistence data

Translation We literally restored our entire infrastructure from scratch and probably our last set of backups. You might have lost some stuff but we don't know what you lost since we couldn't get the last copy of our databases.

Re: An Update on Our Outage

#40

Someone on here posted the other day that someone they knew at Roblox said it was their secret store that became overloaded. Presumably a Hashicorp Vault type service (or something similar.) This update appears to support that claim. That's definitely a problem you only get at scale.

There's a hashicorp case study on Roblox, so likely Vault specifically: https://www.hashicorp.com/case-studies/roblox
Post reply on HN