nanog mailing list archives

Re: Inevitable Consequences--Verisign


From: Haesu <haesu () towardex com>
Date: Wed, 24 Sep 2003 13:24:26 -0400


I am not surprised at all. If VeriSign took their efforts and time to show us
some purported "recommendations" to abide to their new service, they better at
least deal with DoS pretty fast before more people get uptight.

-hc

-- 
Haesu C.
TowardEX Technologies, Inc.
Consulting, colocation, web hosting, network design and implementation
http://www.towardex.com | haesu () towardex com
Cell: (978)394-2867     | Office: (978)263-3399 Ext. 174
Fax: (978)263-0033      | POC: HAESU-ARIN

On Wed, Sep 24, 2003 at 11:54:59AM -0500, Declan McCullagh wrote:

Repeated (though informal) testing over the last 90 minutes showed
that at one point, about one-third of attempted HTTP connections to
sitefinder took over one minute to complete or, in a few cases, failed
entirely.

Now only about one of every 5 or 10 connections is displaying that
behavior.

-Declan


On Wed, Sep 24, 2003 at 05:22:49PM +0300, Petri Helenius wrote:

Curt Akin wrote:

This morning, more often than not, nonexistent domain name access via
http is returning timeouts. Overload? DoS? It appears, for whatever
reason, that Verisign's scheme is not impervious to the inevitable
consequences of arrogant behavior.

 

The service seems to have experienced about 30 minute downtime about an 
hour ago.

On average, the redirect servers has responded in less than four seconds 
in the last
36 hours. This performance is far from what any commercial enterprise 
should provide.

Performance seems to be worst from 9 UTC to 22 UTC, with best hours to
access yourreallyreallynonexistentdomain.com are 1 to 6 UTC.

Pete




Current thread: