From 2019/06/18 to 2019/06/21 we'll be executing maintenance on our Amsterdam platform during night between 1.00 and 8.00 (UTC+2). During this maintenance it can be several services are shortly unavailable. Downtime will be limited to a few minutes.
Please contact us if you have any questions about this maintenance.
On June 10th, at around 15:20 UTC, the Greenhost platform suffered a DDoS attack.
This caused serious network disruption for about 40 minutes which affected Greenhost
services in different degree making some of them inaccessible.
Incident timelines
15:20 UTC the DDoS attack started
15:40 UTC Internal network disruption
16:12 UTC Network stabilized
Root cause
The main cause was a large scale DDoS attack performed on at least one of our
clients on the Greenhost platform. The platform was able to handle the attack
however, caused some problems with a few services which were located on the
same place as the attacked machine.
In order to mitigate the attack, it was decided to exclude a part of the
network to be able to investigate and have a proper handling of the issue.
Unfortunately this lead the unexpected event where the attack traffic was
distributed over the network and not discarded, which made multiple services
(extremely) slow or unavailable (caused by Unknown Unicast traffic).
It took some time to find the root cause of the distribution of the attack.
Eventually the network stabilized.
Affected services
Cloud virtual machines
Hosting services
Mail services
Corrective/Preventative actions
The procedure for handling an attack like this has been reviewed and adjusted
based on the experience of this attack.
Some minor parts of the network design will be adjusted to limit the
possibility of a distribution of the attack on the network (limiting Unknown
Unicast traffic).
Our public communication during this outage was not sufficient. We are updating our
emergency communication strategy to be more comprehensive and timely.