Live data from Hacker News

Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

aws.amazon.com

291–300 of 410 posts

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#291
post #154
post #152

Problem is that I have to defend our own infrastructure real availability numbers vs cloud's fictional "five nines". It's a loosing game.

All I’m hearing is that you can make up your own availability numbers and get away with it. When you define what it means to be up or down then reality is whatever you say it is. #gatekeep your real availability metrics #gaslight your customers with increased error rates #girlboss

What are you trying to imply with that last hashtag?

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#293

I’ve been running platform teams on aws now for 10 years, and working in aws for 13. For anyone looking for guidance on how to avoid this, here’s the advice I give startups I advise. First, if you can, avoid us-east-1. Yes, you’ll miss new features, but it’s also the least stable region. Second, go multi AZ for production workloads. Safety of your customer’s data is your ethical responsibility. Protect it, back it up…

> And, finally, hold cloud providers accountable. If they’re unstable and not providing service you expect, leave. We’ve got tons of great options these days, especially if you don’t care about proprietary solutions.

Easy to say, but difficult to do in practice (leaving a cloud provider)

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#294

Earlier quoted context omitted.

The stuff that's exclusively hosted in us-east-1 is, to my knowledge, mostly things that maintain global uniqueness. CloudFront distributions, Route53, S3 bucket names, IAM roles and similar- i.e. singular control planes. Other than that, regions are about as isolated as it gets, except for specific features on top. Availability zones are supposed to be another fault boundary, and things are generally pretty solid, b…

If I recall there was a point in time where the control panel for all regions was in us-east-1. I seem to recall an outrage where the other regions were up, but you couldn’t change any resources because the management api was down in us-east-1

This was our exact experience with this outage.

Literally all our AWS resources are in EU/UK regions - and they all continued functioning just fine - but we couldn't sign in to our AWS console to manage said resources.

Thankfully the outage didn't impact our production systems at all, but our inability to access said console was quite alarming to say the least.

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#296
post #278

Complex systems are really really hard. I'm not a big fan of seeing all these folks bash AWS for this, and not really understanding the complexity or nastiness of situations like this. Running the kind of services they do for the kind of customers, this is a VERY hard problem. We ran into a very similar issue, but at the database layer in our company literally 2 weeks ago, where connections to our MySQL exploded and…

I’m not all that angry over the situation but more disappointed that we’ve all collectively handed the keys over to AWS because “servers are hard”. Yeh they are but it’s not like locking ourselves into one vendor with flaky docs and a black box of bugs is any better, at least when your own servers go down it’s on you and you don’t take out half of North America.

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#297
I am grateful to AWS for this report.

Not sure if any AWS support staff are monitoring this thread, but the article said:

> Customers also experienced login failures to the AWS Console in the impacted region during the event.

All our AWS instances / resources are in EU/UK availability zones, and yet we couldn't access our console either.

Thankfully none of our instances were affected by the outage, but our inability to access the console was quite worrying.

Any idea why this was this case?

Any suggestions to mitigate this risk in the event of a future outage would be appreciated.

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#298

Earlier quoted context omitted.

I think most of the outrage is not because "it happened" but because AWS is saying things like "S3 was unaffected" when the anecdotal experience of many in this thread suggests the opposite. That and the apparent policy that a VP must sign off on changing status pages, which is... backwards to say the least.

> a VP must sign off on changing status pages, which is... backwards to say the least. I think most people's experience with "VP's" makes them not realize what AWS VP's do. VP's here are not sitting in an executive lounge wining and dining customers, chomping on cigars and telling minions to "Call me when the data center is back up and running again!" They are on the tech call, working with the engineers, evaluating…

I don't think the matter is whether or not VPs are involved, but the fact that human sign off is required. Ideally the dashboard would accurately show what's working or not, regardless if the engineers know what's going on.

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#299
post #145

> This resulted in a large surge of connection activity that overwhelmed the networking devices between the internal network and the main AWS network, resulting in delays for communication between these networks. These delays increased latency and errors for services communicating between these networks, resulting in even more connection attempts and retries. This led to persistent congestion and performance issues o…

The problem shows up at the central system while the peripheral device is causing it. And those systems belong to very different organizations with very different priorities. I still remember how difficult the discussion was with 3G basestation team persuading them to implement exponential backoff with some random factor when connecting to the management system.

Re: Summary of the AWS Service Event in the Northern Virginia (US-East-1) Region

#300
post #278

Complex systems are really really hard. I'm not a big fan of seeing all these folks bash AWS for this, and not really understanding the complexity or nastiness of situations like this. Running the kind of services they do for the kind of customers, this is a VERY hard problem. We ran into a very similar issue, but at the database layer in our company literally 2 weeks ago, where connections to our MySQL exploded and…

Interesting. Just wondering if your guys have a dedicated DBA?
Post reply on HN