DDoS attack on IETF Website

IETF Secretariat <ietf-secretariat@ietf.org> Mon, 15 October 2018 17:40 UTC

Return-Path: <ietf-secretariat@ietf.org>
X-Original-To: ietf-announce@ietf.org
Delivered-To: ietf-announce@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D8EF12D7EA; Mon, 15 Oct 2018 10:40:16 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: IETF Secretariat <ietf-secretariat@ietf.org>
To: IETF Announcement List <ietf-announce@ietf.org>
Cc: ietf@ietf.org
Subject: DDoS attack on IETF Website
X-Test-IDTracker: no
X-IETF-IDTracker: 6.87.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: ietf@ietf.org
Message-ID: <153962521620.18624.1919336673200926978.idtracker@ietfa.amsl.com>
Date: Mon, 15 Oct 2018 10:40:16 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/6oHJcz8sIODRqbZOUgW4Mx6MTI4>
X-BeenThere: ietf-announce@ietf.org
X-Mailman-Version: 2.1.29
List-Id: "IETF announcement list. No discussions." <ietf-announce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-announce>, <mailto:ietf-announce-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-announce/>
List-Post: <mailto:ietf-announce@ietf.org>
List-Help: <mailto:ietf-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-announce>, <mailto:ietf-announce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Oct 2018 17:40:16 -0000

Dear IETF Community,

Today, at approximately 14:00 UTC,  the IETF website began to experience a DDoS attack from a group of hosts in Asia.  This attack generated sufficient request volume to cause the IETF site, as well as the Datatracker and Mailarchive, to time out on some user requests.

The suspect traffic sources were identified and firewalled off through the CDN and on the local network, and normal service has resumed.

For a period of time, some users may see a brief interstitial screen from the CDN when requesting pages from the main IETF site.  This is expected behavior when the CDN is reforming traffic analysis to mitigate an attack.

If you have any questions, please submit them to ietf-action@ietf.org.

- IETF Secretariat