Blackout Worse For Internet Than Previously Thought? 149
An anonymous reader writes "Renesys (the people who previously brought you cool animated graphs of the US/Canada power outage has a new report out. It challenges the widely
held belief that the Internet was largely unaffected by the power outage. Lots of important networks lost connectivity, including banks, hospitals, government organizations and investment funds. There's a cool appendix on the huge Italian power outage in September as well. They conclude that the Internet is not ready to be critical infrastructure."
Obvious? (Score:5, Insightful)
Re:Obvious? (Score:5, Insightful)
Its pretty cool though that it can be observed in terms of routing activity.
Yes, ideally everyone would have backup power (and enough of it). If power outages were common, it might be a good selling point for ISPs, but they aren't so not many people want to may more $ per month just to have battery backup. (Especially residential customers who won't have it at home anyway).
I don't like big government either, but an FTC law (or whatever) mandating backup power for ISPs/backbones of sufficient size or type of service (business vs residenial) might be what's needed.
If phone companies have such a requirement, then the internet probably should to.
(Unfortunately, most phones are powered from the phone line, but I can't say the same about my cable modem...)
OTOH, did many businesses care to have backup power for sufficient length? Just because the some routers went out, it might not have mattered if their end users were already without power.
A robust internet is a great thing, but not near as great as a robust internet with robust users.
Re:Obvious? (Score:5, Interesting)
People are saying two different things here: 1) well, duh, if power is out lots of people can't connect to the web; 2) if the core of the internet routes around that who cares. These are both interesting points. Here are some thoughts:
1) We agree. That's what I though. But read the keynote press releases. Or just google on 'blackout Internet' and you'll find glowing stories about how 'the Internet' didn't even blip under the blackout. We prove pretty conclusively that this is incorrect.
2) The core of the Internet did, indeed, route around the outage. This is good. What is less good is that thousands of networks within the outage area lost connectivity, either due to lost power themselves, or upstreams that lost power (or telcos who lost battery backup on csu/dsu units, or whatever). These are *not* DSL customers (or that grade, anyway). All of these are BGP-speaking networks with their own Autonomous Systems and their own prefixes.
The fact that so many networks went down is significant, given that many organizations are coming to rely on the Internet as a critical communications infrastructure.
Re:Obvious? (Score:2, Funny)
There were many-a-young-kid without the ability to hit the Maxum web site. So to say that there weren't any affects, it's just purely not
NEWS FLASH! (Score:1)
In other news, Generalissimo Franco is still dead.
Re: (Score:1)
Re:Obvious? (Score:2)
As for the people who lost power, I suspect that they were largely more concerned about other things that their communications. When the neighborhood down the street from me lost power, the banks and stores closed. I don't
Re:Obvious? (Score:2)
I agree and disagree. I wouldn't make it a required thing that ISP's _HAD_ to do to. I might come up with a scheme like they did with the emergency network dealy-bob. TV and radio stations, don't have to broadcast at any specific wattage or have any backup at all. If they want to be a part of the emergency netw
How about most sites do not have large UPSs ... (Score:1, Insightful)
Re:How about most sites do not have large UPSs ... (Score:2)
2: make sure that the hosting provider has a generator.
(I've been using netmegs.com for a few years, and been really happy with them - and while they're located in the north east, they didn't go down during the blackout... - ie: if people know what they're doing, the system is fairly fail-safe against these temporary short-term emergencies).
That's fine (Score:5, Insightful)
Re:That's fine (Score:1, Funny)
Re:That's fine (Score:3, Interesting)
Re:That's fine (Score:2)
I still haven't dealt with my inadequate UPS coverage though. Must get more UPSs.
When I start to think about getting my own house, I intend to factor the price of a whole house generator into figuring what I can afford.
Re:That's fine (Score:2)
Agree, and I do.
When I start to think about getting my own house, I intend to factor the price of a whole house generator into figuring what I can afford.
Depending on where you're headed, think green: solar, hydro, or wind! My sister lives off the electrical grid (hydro), and it's amazing. Just have to give a little more thought into what you're running.
Re:That's fine (Score:3)
Though since telephone exchanges have battery backup then during a blackout the phones still work.
But PCs don't.
And invert it.. (Score:2)
More preaching to the chior (Score:2)
This does NOT mean, as people seem to think (like the guy making the headline post) that this guarentees 100% uptime.
If things could be 100% relied upon, there would be no need for rerouting or redundancy. Since TCP/IP was made for the real
Re:That's fine (Score:2)
The internet doesn't seem to have any cascading failure modes. Inter-router links tend to be much larger than any traffic that could go through them. TCP will backoff automatically if a path becomes bandwidth-constrained. Even routing loops will only affect a few paths, and tend to be corrected fairly quickly.
The internet does have other systemic failures, though. Worms an
Ready or not, here we come. (Score:5, Insightful)
Re:Ready or not, here we come. (Score:5, Informative)
The proper conclusion from the data would be that many businesses in the blackout area, despite handling large sums of money daily, did not have sufficient redundant power or connectivity.
Whether anyone could have anticipate such a large scale blackout (and prepare accordingly) is another topic.
Re:Ready or not, here we come. (Score:3, Insightful)
Infrastructure (Score:5, Funny)
But seemingly no less so than the power grid.
-Peter
Re:Infrastructure (Score:4, Interesting)
And the power system is? (Score:5, Insightful)
Re:And the power system is? (Score:5, Insightful)
"We find that Internet connectivity in the blacked-out region was far more seriously affected than has been publicly revealed."
Pointing out that areas without power didn't have internet connectivity seems rather redundant to me. The big question is how did it affect people outside that area? The fact that the rest of the world just plugged right along seems contrary to the conclusion they seem to want to draw.
Re:And the power system is? (Score:5, Interesting)
For home users and small businesses, you are quite right. What about large businesses that invested in generators so they could stay online 24/7? They were prepared to remain online to conduct their business. They depended on the Internet and it failed them.
I work for a large bank. We were not hit by the power outage, but we were scrambling to find routes around the areas that were.Re:And the power system is? (Score:2)
I am sorry, but anybody who thinks keeping power to the one building, while everything else lost power , would keep the infrastructure outside there building working is an idiot. They should be fired.
"We were not hit by the power outage"
I am confused, where you in the blackout area and used generators, or where you trying to connecting to someone within the blackout area?
If a company promissed you 24/7 internet reliability, and they where in the blackout area, sick you legal dogs on them.
The intern
Re:And the power system is? (Score:4, Interesting)
If the Internet were more redundant and ad-hoc (less backbone-centric), it would recover from problems better. That's how it was originally envisioned; unfortunately, the commercialization of NSFNet has largely destroyed this approach, for better or worse.
We have a more organized network, but it's very dependent on critical points because of it's multiplexing organization strategy, so when that fails...
Re:And the power system is? (Score:4, Informative)
But you have to look at it in a slightly different light
If the power goes out hospitals , telephone networks , and other "essential" services tend to have backup generators and backup batteries.
Now for the internet to be ready to reach the legendary uptime of POTS it will have to improve
This means that we should not be routing information on which if it doesnt get there people die exclusively over the internet
The so called essential services must all be willing to accept that one or more of the essential services will fail (hence the amazing backup batteries , generators etc. found at hospitals and telphone companies)
Critical Infrastructure? (Score:5, Insightful)
Sorry, but uptime is not 100% never was, never will be - plan for it, or deal with it when your connection goes down.
Even though we have multiple connections to the backbone - local trunks can go down. Aka backhoe attacks on burried fiber, or dove hunters blasting pole run fiber (don't laugh - it happened last week). If you don't have a backup DSL,ISDN, or heck even dialup connection for your business - then stfu and wait while we repair.
And don't even get me started on residential accounts that call in 'I use this for work I need it up now - send someone out today.' And it's Sunday evening... no - you didn't pay for a business account, so you get residential service levels which include 24-72 hour turn around on repairs.
Re:Critical Infrastructure? (Score:4, Interesting)
A large number of organizations that were multi-homed, using BGP to announce routes out multiple upstream providers lost connectivity. This speaks to the situation that people who have spent a bunch of money on network infrastructure may not have spent enough on power (or may not have carefully evaluated their upstream providers).
One of the organizations located in the study had nine (9!) upstream providers and still went out. This is not a case of people on the far end of a DSL link; this is the case of people not being able to put together reliable network connectivity, even in the face of multi-homing.
Re:Critical Infrastructure? (Score:2)
Re:Critical Infrastructure? (Score:2)
The problem with this is most SME's can't afford to spend the money on a service merely as a 'backup', espessially if they don't understand exactly how much they rely on it (and I'd guess there's a lot of PHB's that don't).
That said, I work at a small company, and we do have a router that automatically fails-over to a modem (which is 16.8k or something - the only external I had sitting a
Re:Critical Infrastructure? (Score:3, Insightful)
Currently, if I lose power, I fire up my generator; I still have water. If the water pump has problems, I can usually get someone over that day (or the next at the latest) to fix it or replace it. With the city water system, I do not get that option
critical infrastructure (Score:5, Insightful)
I'm not saying there isn't other evidence that would support such a conclusion, but the real failure here was the power infrastructure, upon which the net relied "critically" in the first place...
Re:critical infrastructure (Score:1)
For this reason, I still have a old phone that is not cordless. That way if the power goes out, and the phones don't, I can still have some sort of connectivity.
Because Inet is comm, not juice - compare w/Tellco (Score:4, Informative)
Because the internet is communication, not power. So the correct comparison is the telephone company, not the power company.
Power can be backed up locally. Communication can not. So power only needs to be available MOST of the time, with backups on any critical services, to achieve its "critical infrastructure" level of reliability. Communications, on the other hand, requires an infrastructure with multiple links, routing around failures, and local power backup at the active nodes to achieve its own "critical infrastructure" service levels.
The telephone company HAS this level of backup power built in. Switching centers, for instance, run their equipment directly from TWO banks of 48v batteries suitable for days of operation, and run battery chargers continuously when there's power available. Repeaters on long copper trunks are powered from the endpoints - and can run with only one endpoint hot. Telephone instruments are powered from the central office switch via the copper wire. Active customer premesis equipment has battery backup for critical features or is designed to connect at least one POTS phone directly to a copper pair to the switch in case of blackout, and so on. SONET nodes are wired as rings rather than trees, so you have to cut TWO fibers in different places to isolate them. Other trunks are redundant and switch over automatically in case of outage. I could go on. About the only place a single cable cut can cut you off is the line to your house - and if you pay (a lot!) extra (as some businesses do) you can get another run in by a different path, so no single backhoe or downed pole can isolate you.
The Internet was ORIGINALLY designed with this kind of redundancy built in. Individual links were via the tellco's infrastructure, with its power-failure resistance. Routing was automatic, and would find a route between any two nodes if one still existed. (It WAS designed by people who were at least THINKING about surviving a nuclear attack, after all.)
But with the "inflation" of the commercial internet this robustness was lost. The explosion of active IP addresses made routing tables impossibly large, while most sites were connected via a local ISP rather than ad-hoc connection to two (or more) internet neighbors.
So the internet split into a "backbone" with SOME of the old routing redundancy, interconnecting ISPs, who in turn give you a default route JUST to their own servers. If your ISP fails you're cut off, and if the backbone connections to your ISP fail, ditto (even if you in principle COULD reach the rest of the net through somebody with a two-ISP feed.)
The ISP buisness has FIERCE price competition, and one BIG way to cut costs is to reduce redundant routing internally and neglect backup power.
At the backbone level the long-haul networks carrying the data had an even FIERCER price war, due to the excessive long-haul buildout of the internet bubble. Perhaps some of the upstarts powered their switches and repeaters with local power (on the assumption that the could slough any site that had a local power failure and that they'd have a path with all equipment powered between any two customers still live). A major blackout would violate that assumption, cutting off not just the dead area but others who could only reach the rest of the net by routing through it.
How about your DSL or cable IP feed? Did your cable company include battery backup power in the repeaters, pole-mounted routers, and fiber/cable bridges? Is you settop box battery backed up? How about your DSL modem? If you're corporate, are all your routers, your VoIP bridge, and any desktops running a softphone on the UPS? Do your SIP phones run if the power fails? (Home users ditto for your PC.)
Until all these are fixed the internet is NOT running at "critical infrastructure" reliability levels. So you'll want to think VERY CAREFULLY before disconnecting your POTS line and depending on Internet-VoIP. B-)
Worst case scenario (Score:3, Funny)
Re:Worst case scenario (Score:1)
Shame it wasn't down for longer ;-)
I'm not sure I agree with their conclusions (Score:5, Insightful)
Re:I'm not sure I agree with their conclusions (Score:1)
Re:I'm not sure I agree with their conclusions (Score:1)
'Lots of networks/servers/etc in the blackout area were unreachable'
Well, duh.
The most we learn from this is that if you want to stay up in a blackout, invest in better backup power systems. It is not, however, pointing out a significant weakness in the worldwide network as a whole.
Re:I'm not sure I agree with their conclusions (Score:5, Funny)
I learned about it when my card wouldn't swipe me out of the parking garage. And then when all of the traffic lights were out downtown. And then after searching the dial and finding the one AM station still on the air.
Re:I'm not sure I agree with their conclusions (Score:2)
I made it home as quickly as I could... traffic was a nightmare and I only had less than a quarter of a tank of gas. I had decided I would wait until that night to fill up instead of getting it at lunch as I drove past a gas station. Little did I know gas stations don't even have generators to run the pumps (which seems kind of odd... they have plenty of gas to run the generators, but no electricity for the pumps. Lack of planning on their part IMHO).
Re:I'm not sure I agree with their conclusions (Score:2)
For a minute there, I thought you were going to be starting on the next jurrasic park sequel...
Re:I'm not sure I agree with their conclusions (Score:2, Funny)
From this tragic story, I must conclude that AM Radio is the only medium ready for critical infrastructure.
Re:I'm not sure I agree with their conclusions (Score:2)
Err.. Just as well Slashdot moved their servers from east coast to west!! (:
didn't affect me. (Score:2, Troll)
it got to the news quite fast though, thanks for keeping us entertained! we had all these wild theories on what the extra news report would be on and why it had happened!
seriously though, who cares if the internet works if the computers aren't on? i think that might have been the biggest problem.,.
Re: Power Outage (Score:3, Insightful)
Out here on the left coast, there were no effects. So why, don't international org.s and government departments have duplicate facilities on independant grids? That's always bugged me.
bwh
Re: Power Outage (Score:2, Interesting)
Re: Power Outage (Score:1)
You can't tell me that "big corporations" don't have the basics covered insofar as the servers shutting themselves down when the UPSes are ready to drop off?
Re: Power Outage (Score:1)
In fact, at the rate that they were (are?) losing money [canada.com], having their operations shut down temporarily probably saved them a fortune. Sadly it looks like they have not been allowed to go bankrupt.
Re: Power Outage (Score:1)
Re: Power Outage (Score:2)
I'm looking from the North down you insensitive clod.
The network is fine (Score:1)
worked just fine here during blackout (Score:5, Interesting)
While I was unable to make any phone calls, I could get on the internet with GPRS and surf to our server with my laptop for as long as the laptop batteries lasted.
The server is hosted in a colo datacenter which was also in the middle of the affected area. We run a mud on the server, and most of the players are from USA. They never discovered the blackout as the datacenter went on emergency diesel backup and apparently knew to make business with backbone providers that also knew their stuff.
So to the people saying that internet can only route around blackout areas but not _through_ them, this is not true. Seems at least here in denmark all the infrastructure on the backbones got backup power and just keeps working when everyone else is busy lighting candles.
Re:worked just fine here during blackout (Score:1)
I work right next to where the central Danish Internet Exchange (the 'DIX') is located. My company's servers are on a standard UPS so we had power for a couple of hours before we ran dry. While we still had power, our network connectivity was completely unaffected. The DIX and most major Danish ISPs have excellent power
downed internet nodes == useless anyway. (Score:3, Insightful)
Re:downed internet nodes == useless anyway. (Score:1)
Re:downed internet nodes == useless anyway. (Score:2)
How? (Score:2)
Re:How? (Score:1)
Everyone still around was feeling lucky to be alive, and didn't have the money to buy batteries *and* generators.
Chip H.
Re:How? (Score:1)
I suppose if you were using the internet as a critical service you would want backups lined to a major node, and probably more than one, and or have a sattelite relay.
critical infrastructure (Score:2, Insightful)
Radio and Blackouts (Score:2)
Just some thoughts about 1998's power outage during winter [aol.com]. Apparently, the air conditioning was not working in the most recent major power failure, which caused people to sweat more than what they were accustomed to.
Radio in Montreal, until the ice storm, has been fairly stable [haya.qc.ca]
"This situation continued until 1200 when CJFM management decided that they had to "protect their audience" and returned to th
I can't wait to see (Score:2, Funny)
Backwards logic (Score:2)
Given that the power grid is already considered critical infrastructure, it doesn't make sense why they would make the conclusion that the Internet is not suitable as s
my T-Mobile mobile worked great (Score:1, Interesting)
Then my landline died like 3 hours later. Completely. No voltage what so ever. but my mobile worked for the whole duration
Oh yeah? (Score:1, Funny)
Oh yeah? Boys Scouts like me have their 256 CDs of pr0n and mp3 ready in their trusty CaseLogic. We'll last a week longer than everyone else in the event of a catastrophic blackout.
At the risk of "Me Too" (Score:2)
Frankly people the internet is run along the same backbone as the telephone system. Why? Cost. It is as reliable as your major long-distance phone carriers, because it's switched right along side of the long distance phone network.
What bugs me far more than the internet going down is the fact that some morons
Severe local impact (Score:2)
The WTC collapse probably had more impact on global routing (some large carriers had primary and backup equipment in both basements).
Re:Severe local impact (Score:3, Informative)
That's correct. In fact, our data showed that it clearly did _not_ have global impact. (Compare with various worm events, which do generally have global impact: http://www.renesys.com/projects/bgp_instability/i n dex.html
cod red ii and nimda report [renesys.com])
The WTC collapse probably had more im
All right (Score:1)
some things to note (Score:5, Informative)
We invested in a very large portable battery backup system for our server room back when California was having its own blackouts. The stack would probably stay up an hour or so, which we figure is enough to manage most blackouts nicely, and anything longer than that is a "major cockup" that we need to wait out. But if we go down who will care? Just us, and not all that much.
I think that the general expectation regarding the internet is not that it will stay up 100% in a crisis, but that it will continue to operate in cells of functionality during most kinds of disaster, then recover quickly on its own as soon as it can built remote connections again. Compare that to the electric grid, where most or all cells of function were sucked empty and driven into the ground when the grid dried up, and engineers spent days coordinating their recovery so that the first cell to go online didn't feed the entire electric grid on its own. Tricky stuff.
TCP/IP is built to understand rolling outages and uncoordinated recovery. The electric grid still is not. That, I would submit, is the main issue and not that routers on the edge of small networks didn't have generator backup.
Oh really . . . (Score:1)
hmmmm (Score:3, Informative)
The Internet was a lot MORE capable of being infrastructure, before *.com happened. Since it has been commercialized, the backbones have become more and more important, and routing/re-routing less and less important.
"Error: No Route To Host" at one point in history, literally meant that the computer directly connecting the computer you were trying to reach was offline. Now, "No Route To Host" means that there was a power failure somewhere in the world that just happened to be in the way of your provider routing through a few other providers, or that a janitor somewhere kicked out a plug in Minnesota, while you were trying to connect from Michigan to Texas.
The system used to be able to route around virtually ANY connectivity issue. Now, it can't route it's way out of a wet paper bag.
Internet not ready to be critical infrastructure? (Score:2)
Hell, the recent blackout pretty much means that the electrical grid isn't ready to be critical infrastructure, either.
Re:Internet not ready to be critical infrastructur (Score:2)
Let's not forget that part of the justification for building the Interstate highway system was that the high-speed roads could be closed down and used for military transport and possibly even as air strips in case the USA is even invaded. So, any civilian "in case of war" plan that depends on the highways being available is flawed because those roads just might not be open.
Truth is... th
not to sound like a jerk (Score:1)
Internet not ready to be critical infrastructure?! (Score:3, Insightful)
If you're saying that lack of failure defines whether something is critical or ready to be critical then I guess by that definition the electrical distribution grid isn't ready to be critical infrastructure. That is preposterous because it is and manages quite nicely for the most part. The rest is down to cost benefit.
Re:Internet not ready to be critical infrastructur (Score:2)
Re:Internet not ready to be critical infrastructur (Score:2)
Re:Internet not ready to be critical infrastructur (Score:2)
Re:Internet not ready to be critical infrastructur (Score:2)
Re:Internet not ready to be critical infrastructur (Score:2)
I was at an internet center (Score:3, Interesting)
Re:I was at an internet center (Score:1)
Re:I was at an internet center (Score:2)
Re:I was at an internet center (Score:2)
Re:I was at an internet center (Score:3, Interesting)
If a datacenter's up, but nobody's online to use it, do the servers still hum?
Re:I was at an internet center (Score:2)
Some were online (Score:2)
A few weeks prior, they moved the datacenter, to a brand new facility. The new feature was a generator attached to the datacenter, rather than a few hours of batteries. From what I was told, prior it was only batteries.
Found out after, that there was power the whole time in the datacenter, and services were pretty regular.
So not everyone did bad. Depends on how prepaired they were (and of course some luck).
massive overstatement... (Score:2)
Re:massive overstatement... (Score:2)
If that is what you find Slashdot to be, then why are you replying to me when you could be watching tv?
I am moderatly impressed (Score:2, Interesting)
When the world trade center went down, I worked at a major ISP. Verizon is right next door to the WTC, not surprisingly all the main trunks were destroyed. Connectivity for much of the Atlantic including Europe was disrupted. Many carriers had cell towers on top of the building as well. Even from California I didn't need to be told the internet was going to be f#@*ed up on the east. Yet some how people in
Excuse me? (Score:4, Insightful)
Huh? It would seem to me that the fucking power grid is not yet ready to be critical infrastructure but hey, here we are. Shit. There is nothing in the world (except for the sun, oceans, etc.) that is 100.00000% dependable.
Our top story tonight: humans, human inventions imperfect. Tomorrow: sky blue, water wet.
Standards? (Score:2, Insightful)
So. They conclude that the internet is supposed to be more reliable than the power grid...or else it's not ready for prime-time?
Sounds like they're setting their standards a bit too high.
already critical infrastructure (Score:3, Insightful)
Really? It already is a mission critical infrastructure for my company and most others, I suspect. When some idiot with a backhoe takes the region down for a few hours, we're in serious doo-doo (no second carrier where I am). We switch to ye ole spreadsheet as a backup, but we're crippled without Internet access.
I agree with the article - there are some serious architectural flaws that need to be addressed; however, fact of the matter is that the internet has already become a mission critical technology despite these shortcomings.
dude, that internet blackout sucked (Score:2)