ITS Service Status Report

Scheduled Maintenance — Resolved

Rate-limit all inbound TCP SYNs for the DL routers in data centers

Services Affected: Data Center Services

Start Time: 09/09/2020 11:00 pm

Maintenance Completed: 09/19/2020 11:10 pm

Issue Symptoms: None

UMnet will update the configuration on the distribution routers in the data centers and data nodes listed below.

This update will increase reliability of the routers.

Services should experience no disruption as a result of this configuration change.

ASB data center
Modular Data Center
North Campus Data Center
North Campus Administrative services data node
LSA data node
SEB data node
 

Who is Impacted? No impact to services is expected

Next Update: 09/20/20 0:00

Technical Details

Service Type: Production

Comments:

Configure jddosd on the MACC DLs for a reasonable number of pps for "tcp-flags/initial" protocol group to provide strong protection from monthly PCI scanning by IA.
Change was applied to all routers as planned.  No unexpected side effects were observed.
 

Groups Notified:

Report Additional Impacts

Contact the ITS Service Center for more information or to report additional impacts.