2016 Internet Outages Trends, Insights & Analysis

Archana KesavanProduct Marketing Manager

1

About ThousandEyesThousandEyes delivers visibility into every network your organization relies on.

Founded by network experts; strong

investor backing

Relied on for critical operations by leading enterprises

Recognized as an innovative

new approach

31 Fortune 500

5 top 5 SaaS Companies4 top 6 US Banks

2

State of the Internet in 2016

• DDoS Attacks– DNS based, high volume attacks

• Infrastructure Overload– Network & applications unable to

handle peak traffic

• Internet Fragility– Localized cable cuts can cause

world-wide impact

• Redundancy is important!

Trends

3

• The Internet is vulnerable and dependent on critical infrastructure like DNS.

What did the 2016 outages reveal?

• Planning oversight and insufficient pre-production testing can result in poor user-experience.

In a DDoS State of Mind Infrastructure Overload

• Cable cuts, user-induced BGP misconfigurations can be fatal.

• Prolonged outages due to lack of redundant infrastructure.

Internet Fragility Resiliency & Redundancy

4

• Monitor revenue generating assets.• Manage your DNS service providers. • Keep routing in-check.

Prepare for the Year Ahead

• Diversify with multiple data centers, upstream ISP providers and DNS providers.

• Ensure efficient server load-balancing,

Monitor business critical services

Build resilient networks

• Baseline your network to identify bottlenecks and ISP behavior.

• Pre-test your environment. Be Proactive

5

Demo

1. Monitor your critical services for DDoS Attacks

Dyn DDoS Attack

6

DDoS: Dyn Sees Availability and Loss Issues

Correlates with 100% packet loss

Low of 0% availability

7

DDoS: Dyn Traffic Terminates in Telia

Anycast IP accessible from some locations

Traffic terminating in Telia network

8

Demo

2. Overloaded networks & service delivery

Powerball unable to handle heavy traffic

9

Powerball Outage

Page load time spikes to

10seconds at the time of the

lottery

10

Powerball Outage

Powerball introduces Microsoft cloud data centers to handle the

uptick in traffic

100% packet loss

11

Powerball Outage

Powerball futherintroduces EdgecastCDN a few minutes after the lottery to

handle traffic

12

Demo3. Impact of misconfigured routes/route-leaks

Amazon route leak through Hurricane Electric

13

Before the Route Leak

Amazon /20 prefix

advertised by Amazon AS

16509 to upstream ISPs

14

Amazon Route Leak Route leak introduced

results in traffic from Portland

going via Zurich to reach Amazon

in the US

100% packet loss within Hurricane Electric node in

Zurich

15

Amazon Route LeakUpstream ISP introduces new /21 prefix

Innofield introduces a more specific prefix (/21) for Amazon

to a private AS. Results in all traffic going via Hurricane Electric to Amazon to be

dropped!!

16

See what you’re missing.

Watch the webinar:https://www.thousandeyes.com/resources/internet-outages-2016-webinar