hi,
we recently upgraded to zabbix 2.4 from 1.8. We suffered 2 attacks and in each one the network was saturated by DDOS. After the attack went to an end the zabbix server do not recovered. It just stand there still unable to recover from the attack. 11h after we had to restart the server to make all active check work work again.
Do you know why the server just stay dead like this instead of recovering when network is back ?
The attack was not on the zabbix host but on one of the other server in the rack. The swittch was saturated for 2h with udp flood. When the flood stopped zabbix was not able to recover and talk again to the agents. All the active checks were down. Others check where working. restarting individual agent does not made any difference, only a restart of the zabbix daemon was workling.
regards,
Ghislain.
we recently upgraded to zabbix 2.4 from 1.8. We suffered 2 attacks and in each one the network was saturated by DDOS. After the attack went to an end the zabbix server do not recovered. It just stand there still unable to recover from the attack. 11h after we had to restart the server to make all active check work work again.
Do you know why the server just stay dead like this instead of recovering when network is back ?
The attack was not on the zabbix host but on one of the other server in the rack. The swittch was saturated for 2h with udp flood. When the flood stopped zabbix was not able to recover and talk again to the agents. All the active checks were down. Others check where working. restarting individual agent does not made any difference, only a restart of the zabbix daemon was workling.
regards,
Ghislain.
Comment