Portal Home > Knowledgebase > Industry Announcements > Web Hosting Main Forums > Providers and Network Outages and Updates > HawkHost shared hosting services down


HawkHost shared hosting services down




Posted by Compworld, 06-29-2011, 11:12 AM
Just wanted to inform all that HawkHost shared hosting is down. Not sure when they will be back up.

Posted by stablehost, 06-29-2011, 11:15 AM
I doubt all of their servers are down? If they are, it's mostly a datacenter issue. Have you verified with third party websites, such as host-tracker.com that everything is down before making such a big claim?

Posted by CodyRo, 06-29-2011, 11:19 AM
Quote:
Originally Posted by nerdie
I doubt all of their servers are down? If they are, it's mostly a datacenter issue. Have you verified with third party websites, such as host-tracker.com that everything is down before making such a big claim?
Shared name servers being DDoS'd.

Posted by Compworld, 06-29-2011, 11:24 AM
Quote:
Originally Posted by CodyRo
Name servers being DDoS'd.

Yep. Through Hyperspin and watchmouse. Plus e-mailed support, they do not know when it will be back online. So yea, I think I can make a claim like this.

Posted by CodyRo, 06-29-2011, 11:55 AM
Quote:
Originally Posted by Compworld
Yep. Through Hyperspin and watchmouse. Plus e-mailed support, they do not know when it will be back online. So yea, I think I can make a claim like this.
For all intents and purposes I'd agree with your title as it affected anyone who used our name servers.

At this time everything is online - we're working to ensure stability / will be working on ways to mitigate issues like this in the future.

We'll post updates & information in our forums if you feel inclined to follow .

Posted by Compworld, 06-29-2011, 12:01 PM
Sadly, no. Still cannot access any of my sites or even receive e-mail.

Posted by Duport, 06-29-2011, 01:31 PM
I read on hawkhost's forums that everything should be functional now

http://forums.hawkhost.com/topic/159...5195#entry5195

Posted by medjai, 06-29-2011, 01:42 PM
Negative, It has been 20 minutes since that post and sites still down.

Posted by CodyRo, 06-29-2011, 01:45 PM
Quote:
Originally Posted by medjai
Negative, It has been 20 minutes since that post and sites still down.
Incorrect - it's been online for a bit. There were some DNS changes so if your ISP hasn't caught them yet you'll experience issues.

Posted by Compworld, 06-29-2011, 01:48 PM
Nope. Sites are still down as well as messages. It has been like this all morning. No one on live support is ever online either. Any other normal web host would switch to their backups, but no. I've already switched my sites to another host and everything has been uploaded and working at the other host. Thank god I used a third party DNS service.

Hawkhost used to be a great hosting company. I cannot believe how they handled this situation. I understand shared hosts are not very important, but still, we are customers and deserve some respect. We run online businesses which require our sites and messages to be working. This is unacceptable. Been with them for a little over three years, they've had issues in the past, but nothing that lasted nearly 4 + hours. Again, unacceptable.

Posted by stablehost, 06-29-2011, 01:52 PM
What "backup" would you want? It's getting attacked, do you understand what a DDOS attack is?

Every provider goes through them, it's part of the industry. You're acting like they lost your data and there's no backups.

HawkHost is updating their twitter, forums and keeping customers up to date on the status while they are working on getting it filtered -- that's more then 99% other providers would do.

Kudos to them.

Posted by Compworld, 06-29-2011, 01:57 PM
Yea, I know what DDOS is. Been there before. You mitigate the attack and null route the IP and site they are attacking. I do not see their site nor any of the non-shared sites (I know a few) which are inaccessible. Yea, I keep daily backups of my sites. Since I use multiple hosts, third party DNS, I can switch pretty fast if and when this happens. A four + hour outage is unacceptable to me. To you, I guess it is okay. To each his own.

Posted by CodyRo, 06-29-2011, 01:59 PM
Quote:
Originally Posted by Compworld
Nope. Sites are still down as well as messages. It has been like this all morning. No one on live support is ever online either. Any other normal web host would switch to their backups, but no. I've already switched my sites to another host and everything has been uploaded and working at the other host. Thank god I used a third party DNS service.

\
I can assure you everything is online. There were core DNS changes so if the name servers you're using haven't updated you'll experience issues. If you do use a third party DNS you wouldn't have been affected by this at all - none of our servers were affected beyond our name servers. If you're experiencing downtime provide me with a ticket - again there was NO DOWNTIME BEYOND OUR NAME SERVERS. Please don't insist otherwise.

Quote:
Originally Posted by Compworld
Hawkhost used to be a great hosting company. I cannot believe how they handled this situation. I understand shared hosts are not very important, but still, we are customers and deserve some respect. We run online businesses which require our sites and messages to be working. This is unacceptable. Been with them for a little over three years, they've had issues in the past, but nothing that lasted nearly 4 + hours. Again, unacceptable.
What could we have done to handle this better? We posted publicly on Twitter and our forums about ongoing issues. We're aware of this thread and have watched it for anyone who has any questions or concerns and answered accordingly.

Our technicians (including me) were alerted at 10:30 AM EST when the issue was starting. Around 11:00 AM EST the issue escalated where it was affecting everything on a more consistent level (attack started small and got larger). From that time we had technicians handling our 1-800 number, live chat and support desk for tickets. After over 200 tickets later and lots of live chats / 1-800 calls we advised staff to go away on live chat and focus on the 1-800 and support desk.

I don't find how we handled / are handling this unacceptable. I take pride in my company and how we run it - if you can offer constructive criticism on how we can improve please do so. At this time I believe we did everything in our power given the situation.

Sorry if you think otherwise.

Posted by MikeTrike, 06-29-2011, 02:00 PM
Quote:
Originally Posted by Compworld
Yea, I know what DDOS is. Been there before. You mitigate the attack and null route the IP and site they are attacking. I do not see their site nor any of the non-shared sites (I know a few) which are inaccessible. Yea, I keep daily backups of my sites. Since I use multiple hosts, third party DNS, I can switch pretty fast if and when this happens. A four + hour outage is unacceptable to me. To you, I guess it is okay. To each his own.
I'm pretty sure the Distributed in DDoS means more than one IP and can potentially mean hundreds or thousands.

Posted by Compworld, 06-29-2011, 02:05 PM
Hmm, null-routed the targeted IPs, switched the shared to your secondary service, etc. Re-routed the unaffected IPs and sites to safe harbor. There may had been options that could had been taken, but weren't. Again, I didn't see HawkHost.com down nor any of the sites that I know have dedicated servers down. That does say something. That is all.

Posted by CodyRo, 06-29-2011, 02:14 PM
Quote:
Originally Posted by Compworld
Hmm, null-routed the targeted IPs, switched the shared to your secondary service, etc. Re-routed the unaffected IPs and sites to safe harbor. There may had been options that could had been taken, but weren't. Again, I didn't see HawkHost.com down nor any of the sites that I know have dedicated servers down. That does say something. That is all.
It's not that simple - anyone can chime in and confirm.

There were hundreds of thousands of IP's attacking our DNS (still are, actually). Filtering these is difficult as you have to work with the data center to filter at the switch level but to do this we need some sort of signature and so forth (filtering legitimate traffic pretty much makes it moot). You can't simply "null-route the bad IP's" and call it a day.

I won't go into detail but your solution simply is in a "perfect world" situation. You're literally saying "move the attacked IP's to a place that the DDoS won't affect them". It doesn't work that way.

Our website and properties weren't down as we run our own internal DNS system which isn't based off our clients. They simply were not part of the attack.

Posted by layer0, 06-29-2011, 02:15 PM
Compworld, CodyRo is right, it's not that simple.

Posted by trustedurl.com, 06-29-2011, 02:21 PM
Quote:
Originally Posted by CodyRo
NO DOWNTIME BEYOND OUR NAME SERVERS. Please don't insist otherwise.
Your site seems up to me, but there's one thing to consider though; when your nameservers were down, that could (and probably did) affect some clients, mail, http, etc. most things online start with being able to resolve the domain, which isn't happening with the nameservers down. So the service could have been affected for some (which is downtime).

Posted by CodyRo, 06-29-2011, 02:40 PM
Quote:
Originally Posted by trustedurl.com
Your site seems up to me, but there's one thing to consider though; when your nameservers were down, that could (and probably did) affect some clients, mail, http, etc. most things online start with being able to resolve the domain, which isn't happening with the nameservers down. So the service could have been affected for some (which is downtime).
Absolutely - the OP said he used a third party DNS which means he shouldn't have seen any downtime :-).

Posted by trustedurl.com, 06-29-2011, 02:45 PM
Quote:
Originally Posted by CodyRo
Absolutely - the OP said he used a third party DNS which means he shouldn't have seen any downtime :-).
Ah, I guess I should go Tim's and get another coffee, I totally missed that part.

Posted by HostWinds, 06-30-2011, 04:21 PM
Quote:
Originally Posted by Compworld
Hmm, null-routed the targeted IPs, switched the shared to your secondary service, etc. Re-routed the unaffected IPs and sites to safe harbor. There may had been options that could had been taken, but weren't. Again, I didn't see HawkHost.com down nor any of the sites that I know have dedicated servers down. That does say something. That is all.
You want them to null router their nameserver IP's........great idea *sarcasm*



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
DediDirect, Dallas Down? (Views: 1003)


Language: