Live data from Hacker News

GitHub was experiencing a DDoS

status.github.com

61–70 of 74 posts

Re: GitHub was experiencing a DDoS

#61
post #16

I really need to start monitoring GitHub vrs Bitbucket for uptime. I can't think of the last time Bitbucket was down.

We've had some minor issues with Bitbucket being down, or at least inaccessible. Never anything really disconcerting, but it's always a pain when you can't get to your code, even if it's only for a few hours.

Mostly Bitbucket has moments where it seems a little slugish and a pull or push takes what seems like forever.

Re: GitHub was experiencing a DDoS

#62
post #32

Looks like everything is still up though. What is being DDOS'd exactly?

Distributed Denial of Service - https://en.wikipedia.org/wiki/Ddos

I don't think that was the question. The question was, I assume: Which services are being ddos'ed?

Re: GitHub was experiencing a DDoS

#63
post #50
post #10

Coincidentally, I just finished setting up Gitlab and Gitlab CI on a private server. If I could set up repo mirroring between it and Github, it would add a layer of protection for getting critical work done (security by distribution?).

Just have both gitlab and github as upstreams and push to both every time. aka in your .git/config: [remote "origin"] url = https://github.com/somerepo.git url = https://gitlab.yourdomain.tld/somerepo.git fetch = +refs/heads/*:refs/remotes/origin/* And nothing to worry about when github is down.

Huh. I wasn't aware you could do that.

What happens if the repos aren't in sync and you pull?

Re: GitHub was experiencing a DDoS

#64
post #28

Earlier quoted context omitted.

It was down a few weeks ago, right in the middle of the last big deploy I did. Just had to laugh honestly.

That was scheduled maintenance, however. They had big banners with warnings everywhere on Bitbucket for several days before the event.

I think the problem with BitBucket and GitHub is that i never need to go to the website for most things. All the interfacing I do is thought the Git or mercurial Interface.

Re: GitHub was experiencing a DDoS

#66
post #53

Earlier quoted context omitted.

There is a reason there are controls to allow you to upvote, or downvote stories. If you don't like a story, and have nothing to contribute to the story, downvote it. If the story is in the top few, it's because people (that aren't you) are interested in knowing that github is getting attacked. EVERYTHING is inconsequential in the grand scheme of things. Edit: Heh, there are no downvotes on HN for stories. My bad.

> If you don't like a story, and have nothing to contribute to the story, downvote it. You should try doing this because I don't think it actually exists. I do understand why the hackernews crowd is interested in the status of github. What I don't understand is why those same people don't know about status.github.com and @githubstatus already. If github is a critical piece of your infrastructure, add a couple of book…

Good point on the existence of the down vote functionality, I've amended my comment above.

To your other points though, Github being DDoSed is something I would like to know about, but does not happen so frequently that I should bookmark the status page and check it every hour to see if someone is DDoSing them. That's rather absurd.

Re: GitHub was experiencing a DDoS

#67
post #59
post #49

Earlier quoted context omitted.

I manage newgrounds.com which gets quite a bit of traffic. We'll get what I think are DDoS attacks at least once a month. I can see our connection tracking stats go up to the millions and traffic spikes way up of course. I don't know WHY they do this, but last time it happened we got an abuse report saying that we were reported for port scanning from our main firewall / proxy box. Somehow they had reflected traffic o…

> I don't know WHY they do this, but last time it happened we got an abuse report saying that we were reported for port scanning from our main firewall / proxy box. Somehow they had reflected traffic off our firewall / proxy to make it try to connect to a bunch of IPs on a known trojan port. How did you solve it?

Not sure it's solved, but I added some additional firewall rules to block certain types of ICMP packets that they were sending and added some additional logging for when it happens again.

Re: GitHub was experiencing a DDoS

#68
post #49

Earlier quoted context omitted.

I manage newgrounds.com which gets quite a bit of traffic. We'll get what I think are DDoS attacks at least once a month. I can see our connection tracking stats go up to the millions and traffic spikes way up of course. I don't know WHY they do this, but last time it happened we got an abuse report saying that we were reported for port scanning from our main firewall / proxy box. Somehow they had reflected traffic o…

They wouldn't necessarily have received useful data from it. Consider what happens if you spoof the sender IP and port in the first packet of a TCP handshake: the recipient will send a response to the spoofed IP, making it look like they are the bad guys. Someone isn't filtering Martians properly, or those spoofed packets would have been filtered before they reached you.

Yeah that's what so confusing about this.

I'm filtering martians/bogons, which I see getting blocked constantly.

Re: GitHub was experiencing a DDoS

#69
post #53

Earlier quoted context omitted.

> If you don't like a story, and have nothing to contribute to the story, downvote it. You should try doing this because I don't think it actually exists. I do understand why the hackernews crowd is interested in the status of github. What I don't understand is why those same people don't know about status.github.com and @githubstatus already. If github is a critical piece of your infrastructure, add a couple of book…

Good point on the existence of the down vote functionality, I've amended my comment above. To your other points though, Github being DDoSed is something I would like to know about, but does not happen so frequently that I should bookmark the status page and check it every hour to see if someone is DDoSing them. That's rather absurd.

Wouldn't you just check it if github seemed to be having problems?

Re: GitHub was experiencing a DDoS

#70
post #50

Earlier quoted context omitted.

Just have both gitlab and github as upstreams and push to both every time. aka in your .git/config: [remote "origin"] url = https://github.com/somerepo.git url = https://gitlab.yourdomain.tld/somerepo.git fetch = +refs/heads/*:refs/remotes/origin/* And nothing to worry about when github is down.

Huh. I wasn't aware you could do that. What happens if the repos aren't in sync and you pull?

I honestly don't know, should test it and find out. Will look at it later today.

Edit: curiosity got the better of me https://gist.github.com/mitchty/0c2089445c1400d46cb9

Basically exactly what you'd think.

Post reply on HN