During scheduled maintenance on the legacy VZ001.DC4.SEA Virtuozzo environment a forced file system check (FSCK) was encountered that lead to an extended window. The file system check was completed 1:40AM PDT and all devices have recovered.
Currently all Network Redux infrastructure has been updated and is no longer vulnerable to the CVE-2014-0160 issue, labeled “Heartbleed.”
While we are confident that we have addressed the main concerns related to Heartbleed, we will continue to keep a vigilant eye on all hosting platforms for potential risks stemming from this issue.
This is a critical security advisory that a software bug in OpenSSL called ‘Heartbleed’ has been discovered and made public as of April 7th, 2014 (CVE-2014-0160).
Detailed information can be found at the following address: http://heartbleed.com/
We encourage all clients to test and determine if your https:// site is impacted. This test can be competed at: http://filippo.io/Heartbleed/.
The cluster member xen001.cl1.dc4 experienced a failure and all VMs residing on this member have been moved to other members of the cluster. We continue to investigate the cause for failure of this member.
On December 19th at approximately 09:00 PST our network monitoring system notified us of network issues in our Seattle location. Customers may have noticed packet loss and latency during this time. We are currently investigating the issue and will update customers as soon as more information is available.
Update 09:30 PDT:
The issue was pinpointed as a Denial of Service attack. The attack has been mitigated at this time. We are continuing to monitor the Seattle network.