Критический Устранено Разбор опубликован

Loss of external connectivity in AMS

Сеть — транзит и пиринг — AMS · Внеполосное управление — AMS

Статус: Устранено
Влияние: Критический
Начато: 4 июн. 2025 г., 17:50 UTC
Устранено: 4 июн. 2025 г., 18:00 UTC
Длительность: 10 минут
Затронуто: Серьёзный сбойСеть — транзит и пиринг — AMS

Серьёзный сбойВнеполосное управление — AMS
Референс: 7ufhfjss6z

Текущий статус

Обновления по инциденту пишутся на английском языке дежурным инженером и не переводятся.

Хронология

Устранено4 июн. 2025 г., 18:00 UTC

AMS has been fully reachable since 18:00 UTC. Duration: 10 minutes. Workloads kept running; every machine in the site receives the SLA extension automatically.
Причина установлена4 июн. 2025 г., 17:57 UTC

A configuration push to the two core switches in AMS was applied in the wrong order and removed the external VLAN from both before re-adding it. The push has been rolled back.
Идёт расследование4 июн. 2025 г., 17:53 UTC

All machines in AMS became unreachable from outside at 17:50 UTC. Both transit carriers and the exchange are down simultaneously, which points at something inside the site rather than at a carrier.

Разбор инцидента · 8 июн. 2025 г., 07:04 UTC

Что произошло и что изменилось

Причина

A configuration change intended to be applied to one core switch at a time was pushed to both at once by the automation, because the change set was tagged with the site rather than with a single device. The change removed and re-added the external VLAN; with both switches doing it simultaneously there was no path out of the site for 10 minutes.

Влияние

Every machine in AMS was unreachable from the internet for 10 minutes. Out-of-band access went down with it because the management network shares the same uplinks. No workload was interrupted and no data was lost.

Что мы изменили

The automation now refuses to target more than one core device per site in a single change, without exception.
The out-of-band network in every site now has an independent uplink so that we retain console access during an event of this kind.
Term extensions were applied to every machine in AMS.