Domain services - DNS
Incident Report for OpenSRS
Postmortem

Incident Date: September 19, 2020
Incident Number: PR-1339

On September 19, 2020 at 12:08 PM ET, Tucows’ experienced service degradation impacting Tucows Domains, Hover.com, Enom.com and Ting.com. The service degradation was due to a DDoS attack.  

Tucows initiated DDoS mitigation protocol to block the offending traffic and to stabilize the platform. At 2:55 PM ET, The DDoS attack subsided and all the services were restored successfully. 

At 3:49 PM ET, Tucows encountered another service interruption due to a second DDoS attempt. Due to the nature of the attack, Tucows had to amend the dynamic rules, and thresholds to auto-mitigate the abusive traffic. At 5:38 PM ET,  The DDoS attack subsided and all the impacted services were restored. 

Tucows refined the dynamic rules to auto-mitigate the abusive traffic in a timely manner.

Tucows is to further review and enhance the overall security against malicious traffic.

Thank you,

Tucows Engineering Team

Posted Sep 22, 2020 - 21:35 UTC

Resolved
The engineering team has blocked the abusive traffic and Tucows.com has been restored successfully.

Incident Start Time: 09-19-2020 16:08:00 UTC
Incident End Time: 09-19-2020 21:38:00 UTC
Duration: 5 hrs 30 minutes
Posted Sep 19, 2020 - 19:14 UTC
Update
We are still observing intermittent failures for Tucows.com. The engineering team continues to block abusive traffic.
Posted Sep 19, 2020 - 18:59 UTC
Update
All services have recovered successfully except tucows.com. The engineering team continues to further mitigate degradation.
Posted Sep 19, 2020 - 18:03 UTC
Monitoring
Mitigation continues, we have not experienced any slowness at this time but will continue to monitor the situation. Users may still be unable to reach tucows.com.
Posted Sep 19, 2020 - 17:06 UTC
Update
We are currently experiencing a volumetric DDOS attack on our services, our engineering team is working to mitigate. Some DNS services may experience degraded performance. We will continue to update as new information comes in.
Posted Sep 19, 2020 - 16:19 UTC
Investigating
We are currently experiencing an issue with (Tucows.com). The tucows.com website is unreachable at the moment and we are currently investigating the issue.

Users will see timeout while loading tucows.com in their browsers.


Start time: 13:38:00 UTC
Posted Sep 19, 2020 - 13:59 UTC