Degraded Performance on WAF/CDN Cluster xx11
Incident Report for Sucuri, Inc
We had 3 blocks of 10 minutes of degraded performance on our WAF/CDN cluster xx11 early this morning (between 6:30am and 8am pacific time). It affected customers using our Anycast IP address 192.124.249.11 and 192.124.249.111.

The problem was caused by a very large layer 7 DDoS (http flood) combined with a very large layer 3 (syn flood) attack. Our team was able to respond and mitigate the attacks very quickly, but our datacenters in Europe and West/East of the USA had 3x10minutes of degraded performance and very high response time.

We apologize for the incident and our team had put some additional rules in place to prevent that from happening again.
Posted 9 months ago. Sep 07, 2017 - 15:05 UTC