dataforest incident
Partial Packet Loss in DDoS Protection Infrastructure
dataforest experienced a major incident on September 14, 2026 affecting DDoS Protection (affects all locations), lasting 5h 43m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring Sep 14, 2026, 02:47 PM UTC
At 16:25, 16:32, and 16:35, a particular DDoS attack overloaded the DDoS filters at both POPs, causing temporary packet loss. A temporary fix has been implemented, and we are working on a permanent solution. Unprotected traffic was unaffected.
- monitoring Sep 14, 2026, 03:05 PM UTC
We have updated the initial version of this post, as we originally assumed that only one of our POPs was affected. In fact, both were.
- monitoring Sep 14, 2026, 06:50 PM UTC
The issue recurred at 20:39 for a few seconds, but with less impact as only one of our POPs was affected. We are still working on a permanent solution; our temporary fix has already reduced the impact.
- resolved Sep 14, 2026, 08:31 PM UTC
At the previously specified times, an incorrect handling of dynamic attack pre-filtering during specific, very large DDoS attacks overwhelmed some of our filtering appliances, causing the issues described in this post. A permanent fix was deployed at 21:00, which has since been successfully verified under real-world traffic conditions. We can confirm that no further issues occurred other than those detailed here.