akamai abnormal spike

Blake Hudson blake at ispn.net
Mon Jul 18 13:49:21 UTC 2016


We noticed that on the 12th-14th we had multiple subscribers on ~5Mbps 
subscription rates that were being sent ~50Mbps of data sourced from TCP 
port 80 (apparently HTTP) from Limelight Networks' servers. The data did 
appear to be user requested, still not sure why TCP didn't throttle the 
data rate appropriately. The 50Mbps was distributed across multiple LLNW 
servers. Makes me wonder if the customer was requesting one batch of 
data and multiple servers were responding.

The issue cleared up on its own and I never was able to perform a full 
packet capture to investigate. I have not noticed the same behavior from 
Akamai servers.

Clayton Zekelman wrote on 7/18/2016 8:26 AM:
>
>
> We noticed on the 12th and 13th there was a significant up tick in 
> traffic served from our Akamai servers as well.
>
>
> At 05:37 PM 13/07/2016, eric c wrote:
>> Good afternoon,
>>
>> Has anyone notice any abnormal spike in Akamai trafic in the last 24-48
>> hours compared to other days. I know it was black tuesday yesterday but
>> traffic from last month didn't even come close to what we saw from 
>> Akamai.
>>
>> We have some caching servers and even notice a spike to them as well.
>>
>> Limelight even showed up on our network.
>>
>> thanks
>> eric
>




More information about the NANOG mailing list