Click here to close now.

SYS-CON MEDIA Authors: AppDynamics Blog, Ian Goldsmith, Ed Featherston, Elizabeth White, Pat Romanski

Related Topics: Security, Java, Microservices Journal, AJAX & REA, Cloud Expo, Big Data Journal

Security: Article

Major Internet Outage in China

For whatever reason at around 3 pm (China time) 2/3 of any domain requests in China were routed to one single IP address

Yesterday one of the biggest outages in history, if not the biggest outage, happened to the Internet in China.

Primarily and directly affected by that outage were most of the people living in China and browsing the Internet in China. Secondary, all companies doing online business in China were affected.

The reasons for the outage are discussed below but I would like to focus on what has happened and what this means for all of us - including Compuware - with our Web presence in China.

For whatever reason at around 3 pm (China time) 2/3 of any domain requests in China were routed to one single IP address.

That single datacenter of course went down immediately by the loads of requests hammering it within milliseconds. At that very moment the Internet in China went down - with a few exceptions (VPN users and those who had the DNS cached within their client).

The outage lasted for north of 8 hours, during the core business time in China.

Interestingly enough, not all domains were affected. Mainly those ending with .com and .net didn't make it. Others with the ending com.cn were "only" partly offline but still had problems. Adobe was technically not reachable. Nokia.com was available in parts of China but part of its content was directed to the suspect IP.

If one domain was reachable because the users browser still had the domain/IP relation in mind other issues appeared.

I mentioned Nokia.com just a second ago. Nokia.com itself was available but the page was kind of broken and loading very slow. The reason was the domain r.nokia.com was falsely directed to the one and only IP everything got directed to.

Figure 1: HTML of Nokia.com was loaded but no css and js. That made the page unusable.

You can see how everything got routed to the one IP address - six connections by only one single host name. Imagine how many requests hammered on that server when you know there are hundreds of millions of Chinese users opening a webpage that has 21 different host names included (average number of hosts included in a webpage - source HTTParchive.com). This incident can be considered the biggest DDoS attack in history.

Now with that said - what else has been damaged?

Read the entire blog post here for a deeper analysis and more details regarding the scope and impact of this major "Internet earthquake.".

Summary
Nearly every Chinese Internet user was affected by the outage. Nearly every company doing online business in China was affected by this outage. Click here to view more analysis.

It is interesting how sensitive the Internet is, reacting to a tiny DNS accident, how long it took to recover - and most important - how quiet everything was outside of China. The web was nearly not available to one of the strongest and fastest-growing economies for one business day.

More Stories By Heiko Specht

Heiko Specht is a technology expert at the Compuware APM Center of Excellence. His focus is on APM as a Service in the EMEA markets. Heiko has experience in all areas of Web Performance and Application Monitoring and special expertise in APIs, data interpretion, agile developement, webservices, XML, XSL, php, asp, XHTML, CSS, Enterprise infrastructure, Server architecture, Server sizing, interface description, flexible, performance management, monitoring key business processes and business impact analysis.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Latest Stories
The DevOps Institute (DOI) launched on Monday with the mission of serving as the premier source for aligning industry standard quality DevOps training and examination services for enterprise IT. The Institute is led by a Board of Regents who will oversee DOI’s offerings in an effort to codify and promote DevOps’ best practices and standards that enable enterprise IT to deliver more value faster to their customers. The initial Board of Regents includes Gene Kim, Lori MacVittie, Sanjeev Sharma, ...
In his session at DevOps Summit, Andrei Yurkevich, CTO at Altoros, provided an overview of all the benefits and opportunities, as well as drawbacks of deploying Cloud Foundry PaaS with Juju and compared it to BOSH. Discover the features that overlap, and understand what Juju Charm is, what it is not, where you use one or the other or where you use both BOSH and Juju Charms together. Andrei Yurkevich is Cloud Foundry protagonist and CTO at Altoros. Under his supervision, the Altoros engineering ...
Cultural, regulatory, environmental, political and economic (CREPE) conditions over the past decade are creating cross-industry solution spaces that require processes and technologies from both the Internet of Things (IoT), and Data Management and Analytics (DMA). These solution spaces are evolving into Sensor Analytics Ecosystems (SAE) that represent significant new opportunities for organizations of all types. Public Utilities throughout the world, providing electricity, natural gas and water,...
MeriTalk, a public-private partnership focused on improving the outcomes of government IT, today announced the results of its new report, "The Agile Advantage: Can DevOps Move Cloud to the Fast Lane?" The study, underwritten by Accenture Federal Services, reveals that approximately two-thirds of Feds say DevOps will help agencies shift into the cloud fast lane - improving IT collaboration and migration speed. But help is needed, with 66 percent saying that their agency needs to move IT services ...
The Internet of Things will put IT to its ultimate test by creating infinite new opportunities to digitize products and services, generate and analyze new data to improve customer satisfaction, and discover new ways to gain a competitive advantage across nearly every industry. In order to help corporate business units to capitalize on the rapidly evolving IoT opportunities, IT must stand up to a new set of challenges. In his session at @ThingsExpo, Jeff Kaplan, Managing Director of THINKstrateg...
Can call centers hang up the phones for good? Intuitive Solutions did. WebRTC enabled this contact center provider to eliminate antiquated telephony and desktop phone infrastructure with a pure web-based solution, allowing them to expand beyond brick-and-mortar confines to a home-based agent model. It also ensured scalability and better service for customers, including MUY! Companies, one of the country's largest franchise restaurant companies with 232 Pizza Hut locations. This is one example of...
The 4th International Internet of @ThingsExpo, co-located with the 17th International Cloud Expo - to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA - announces that its Call for Papers is open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
Wearable devices have come of age. The primary applications of wearables so far have been "the Quantified Self" or the tracking of one's fitness and health status. We propose the evolution of wearables into social and emotional communication devices. Our BE(tm) sensor uses light to visualize the skin conductance response. Our sensors are very inexpensive and can be massively distributed to audiences or groups of any size, in order to gauge reactions to performances, video, or any kind of present...
One of the biggest challenges when developing connected devices is identifying user value and delivering it through successful user experiences. In his session at Internet of @ThingsExpo, Mike Kuniavsky, Principal Scientist, Innovation Services at PARC, described an IoT-specific approach to user experience design that combines approaches from interaction design, industrial design and service design to create experiences that go beyond simple connected gadgets to create lasting, multi-device exp...
The true value of the Internet of Things (IoT) lies not just in the data, but through the services that protect the data, perform the analysis and present findings in a usable way. With many IoT elements rooted in traditional IT components, Big Data and IoT isn’t just a play for enterprise. In fact, the IoT presents SMBs with the prospect of launching entirely new activities and exploring innovative areas. CompTIA research identifies several areas where IoT is expected to have the greatest impac...
There is little doubt that Big Data solutions will have an increasing role in the Enterprise IT mainstream over time. 8th International Big Data Expo, co-located with 17th International Cloud Expo - to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA - has announced its Call for Papers is open. As advanced data storage, access and analytics technologies aimed at handling high-volume and/or fast moving data all move center stage, aided by the cloud computing bo...
Some developers believe that monitoring is a function of the operations team. Some operations teams firmly believe that monitoring the systems they maintain is sufficient to run the business successfully. Most of them are wrong. The complexity of today's applications have gone far and beyond the capabilities of "traditional" system-level monitoring tools and approaches and requires much broader knowledge of business and applications as a whole. The goal of DevOps is to connect all aspects of app...
DevOps is the hottest moving target when it comes to software development methodologies. Many people fear that this fast-paced, barrier-breaking movement will leave information security best practices in the dust. Analysts provide recommendations to security professionals using bingo-laden terms like "moving security to the left" or "get a seat at the table." What we need are real-world examples and tactics for security practitioners to be part of DevOps. In his session at DevOps Summit, Andrew...
Every day we read jaw-dropping stats on the explosion of data. We allocate significant resources to harness and better understand it. We build businesses around it. But we’ve only just begun. For big payoffs in Big Data, CIOs are turning to cognitive computing. Cognitive computing’s ability to securely extract insights, understand natural language, and get smarter each time it’s used is the next, logical step for Big Data.
The Internet of Things will greatly expand the opportunities for data collection and new business models driven off of that data. In her session at @ThingsExpo, Esmeralda Swartz, CMO of MetraTech, discussed how for this to be effective you not only need to have infrastructure and operational models capable of utilizing this new phenomenon, but increasingly service providers will need to convince a skeptical public to participate. Get ready to show them the money!