{"id":171,"date":"2009-01-21T15:58:46","date_gmt":"2009-01-21T20:58:46","guid":{"rendered":"http:\/\/www.webadminblog.com\/?p=171"},"modified":"2009-03-02T17:38:10","modified_gmt":"2009-03-02T22:38:10","slug":"a-dos-we-can-believe-in","status":"publish","type":"post","link":"https:\/\/www.webadminblog.com\/index.php\/2009\/01\/21\/a-dos-we-can-believe-in\/","title":{"rendered":"A DoS We Can Believe In"},"content":{"rendered":"

We knew that the historic inauguration of Barack Obama would be generating a lot more Internet traffic than usual, both in general and specifically here at NI.\u00a0 Being prudent Web Admin types, we checked around to make sure we thought that there wouldn’t be any untoward effects on our Web site.\u00a0 Like many corporate sites, we use the same pipe for inbound Internet client usage and outbound Web traffic, so employees streaming video to watch the event could pose a problem.\u00a0 We got all thumbs up after consulting with our networking team, and decided to not even send any messaging asking people to avoid streaming.\u00a0 But, we monitored the situation carefully as the day unwound.\u00a0 Here’s what we saw, just for your edification!<\/p>\n

Our max inbound Internet throughput was 285 Mbps, about double our usual peak.\u00a0 We saw a ni.com Web site performance degradation of about 25% for less than two hours according to our Keynote stats.\u00a0 ni.com ASPs were affected proportionately which indicates the slowdown was Internet-wide and not unique to our specific Internet connection here in Austin.\u00a0 The slowdown was less pronounced internationally, but still visible.\u00a0 So in summary – not a global holocaust, but a noticeable bump.<\/p>\n

Cacti graphs showing our Internet connection traffic:<\/p>\n

\"obamabumpcactihrly\"\"obamabumpcactidaily\"<\/p>\n

Keynote graph of several of our Web assets, showing global response time in seconds:\"obamabumpkeynote\"Looking at the traffic specifically, there were two main standouts.\u00a0 We had TCP 1935, which is Flash RTMP, peaking around 85 Mbps, and UDP 8247, which is a special CNN port (they use a plugin called “Octoshape” with their Flash streaming), peaking at 50 Mbps.\u00a0\u00a0 We have an overall presence of about 2500 people here at our Austin HQ on an average day, but we can’t tell exactly how many were streaming.\u00a0 (Our NetQoS setup shows us there were 13,600 ‘flows,’ but every time a stream stops and starts that creates a new one – and the streams were hiccupping like crazy.\u00a0 We’d have to do a bunch of Excel work to figure out max concurrent, and have better things to do.)<\/p>\n

In terms of the streaming provider breakdown – since everyone uses Akamai now, the vast majority showed as “Akamai”.\u00a0 We could probably dig more to find out, but we don’t really care all that much.\u00a0 And, many of the sources were overwhelmed<\/a>, which helped some.<\/p>\n

We just wanted to share the data, in case anyone finds it helpful or interesting.<\/p>\n","protected":false},"excerpt":{"rendered":"

We knew that the historic inauguration of Barack Obama would be generating a lot more Internet traffic than usual, both in general and specifically here at NI.\u00a0 Being prudent Web Admin types, we checked around to make sure we thought that there wouldn’t be any untoward effects on our Web site.\u00a0 Like many corporate sites, […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[3,5],"tags":[24,73,211],"class_list":["post-171","post","type-post","status-publish","format-standard","hentry","category-apm","category-monitoring","tag-internet","tag-network","tag-obama"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pfI0c-2L","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/comments?post=171"}],"version-history":[{"count":4,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/171\/revisions"}],"predecessor-version":[{"id":176,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/posts\/171\/revisions\/176"}],"wp:attachment":[{"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/media?parent=171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/categories?post=171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webadminblog.com\/index.php\/wp-json\/wp\/v2\/tags?post=171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}