RE: Trouble accessing www.nanog.org

["Michael K. Smith - Adhost" <mksmith () adhost com>]

> -----Original Message-----
> From: Michael Hallgren [mailto:m.hallgren () free fr]
> Sent: Wednesday, January 04, 2012 1:11 PM
> To: bmanning () vacation karoshi com
> Cc: Wessels, Duane; nanog () nanog org
> Subject: Re: Trouble accessing www.nanog.org
>
> Le mercredi 04 janvier 2012 à 20:18 +0000, bmanning () vacation karoshi com
> a écrit :
> > On Wed, Jan 04, 2012 at 03:10:13PM -0500, George, Wes wrote:
> > > > From: Wessels, Duane [mailto:dwessels () verisign com]
> > > > Sent: Wednesday, January 04, 2012 1:41 PM
> > > > Subject: Re: Trouble accessing www.nanog.org
> > > >
> > > >
> > > > The brief problem in accessing www.nanog.org was due to numerous
> > > > parallel
> > > > downloads of a large video file by a single source IP address.  We have
> > > > no reason to believe it was malicious in intent, but the offender has
> > > > been
> > > > blocked anyway.
> > >
> > > [WEG] In the lovely CGN future, not only will you see this type of
> behavior (multiple pulls from the same IP) all of the time, your response to
> block it would have taken tens or hundreds of users out of service
> simultaneously.
> > > /troll
> > >
> > > Not meant to fault your response, merely to point out yet one more way
> that CGN is likely to break things where an assumption of 1 IP = 1
> user/host/network exists.
> > > Wes George
> >
> >     Hum... thats not how I read Duanes response at all.. I thought they
> blocked
> >     the (excessively) large video file from download... :)
>
> Depends of how we (are supposed to) interpret ``the offender has been
> blocked anyway'' :)
>
> Cheers,
> mh
> > /bill
There was a single source IP with 200+ open, active http connections to a single large media file.  The single IP 
address was blocked.  The file itself is still available on the site.

Mike