5· 19 The causes of network outage in 6 southern provinces were preliminarily identified

At 21:50 on May 19, users in Jiangsu, Anhui, Guangxi, Hainan, Gansu, Zhejiang and other six provinces reported that the speed of access to the website was slow or inaccessible. Wu Hongsheng, head of DNSPod, told reporters that the accident was in a sense a "butterfly effect".

In the beginning, it may be just one online game service attacking another private service in order to compete for players. Unable to hack rival websites, the hackers simply started with domain names and bombarded DNSPod's servers. This caused China Telecom to detect abnormal inter-network traffic, which activated the emergency mechanism.

image

Unfortunately, the compromised DNS server was providing domain name resolution services for about 100,000 websites. Among them, Verycd, China webmaster, 4399.com and other well-known websites, and the most famous, the largest traffic is exactly the storm video. The simultaneous requests to 100,000 websites led by Baofeng Video turned into a disaster. Because Wu Hongguang's DNS server has been paralyzed, and the user's request collectively turned to the DNS resolution server of China Telecom, which led to the telecom server was soon paralyzed. This effect gradually expanded, and eventually led to the "519" major accident of network paralysis in six provinces in the south of the country.

Therefore, the biggest culprit of the accident is likely to be online game private service. According to people familiar with the matter, some online game private service will spend about 2 million to 3 million yuan per month to buy the Trojan virus "chicken" computer. Manipulate these Trojans to attack their competitors. This kind of grey industrial chain seriously affects China's network security.

And the previous rumors caused by the storm video website's own domain name resolution failure, purely fictitious. Due to the impact of the DNS domain name resolution server paralysis caused by the storm is also one of the victims.

Technorati Tags: Network, Security,DNS