Now that Memorial Day has come and gone, the annual exodus of employees is beginning – and the new summer interns are arriving en masse. That means that the smartphones and tablets your employees use for business are about to go on holiday with their owners or users – and that means it’s time to take a close look at the security and shadow IT concerns that come with the season.Read More
As you may have noticed, Breezy suffered a service disruption for approximately 11 hours on Monday, Dec 1 PST. No customer data was compromised and the majority of our users were unaffected, but many of you were unable to print or to access the Dashboard, our support site or our website during this outage.
The outage was due to a DDoS attack against our DNS system, DNSimple. DNS systems such as DNSimple tell computers how to use domain names like "breezy.com" to reach servers on the Internet. During the attack, DNSimple's system became so overwhelmed that it was unable to respond timely to many requests -- so if your computer or mobile device tried to reach anything (including our API) at the "breezy.com" domain, it very likely received a "name server error", and the request failed.
What We're Doing About It
DNSimple itself is taking a number of actions to mitigate future attacks, and has posted a full postmortem on their own blog. Their handling of the incident has been exemplary, and is one of the reasons we've chosen to stick with them. However, for our part, we'll also be adding a backup DNS system to provide failover support in case they ever suffer a similar outage.
Our uptime over the past year sits at 99.92%, but we will continue to invest in infrastructure improvements to bring that number higher.
That said, the reality is that 100% uptime is impossible to guarantee, and we want you to know what's happening should any outage ever occur in the future. During any incident, we will always post up-to-date information via our Twitter feed (@Breezy), and we have created a dedicated status page, hosted on separate servers with separate DNS, at www.breezystatus.com.
Our highest priority is the success of our customers, and we sincerely apologize for the disruption to your business that this outage caused. Thank you for your continued support!
Whether you work in a small business, a growing mid-size business, or a large enterprise, protecting your business from cyber threats can seem like a daunting task. A smaller business may not need the robust protections required for an enterprise, but regardless of the size of your business there are five basic steps that are absolutely essential.
By Andrew Hay