Slashdot Mirror


Seattle Data Center Outage Disrupts E-Commerce

1sockchuck writes "A major power outage at Seattle telecom hub Fisher Plaza has knocked payment processing provider Authorize.net offline for hours, leaving thousands of web sites unable to take credit cards for online sales. The Authorize site is still down, but its Twitter account attributes the outage to a fire, while AdHost calls it a 'significant power event.' Authorize.net is said to be trying to resume processing from a backup data center, but there's no clear ETA on when Fisher Plaza will have power again."

27 of 118 comments (clear)

  1. Heh by MightyMartian · · Score: 5, Insightful

    Redundancy ain't just a river in Egypt.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
    1. Re:Heh by Anonymous Coward · · Score: 3, Informative

      It's interesting how many companies have assumed redundancy in place but never take the time to do proper testing. They figure that once a disaster happens, that everything will automatically work because their vendor or staff said so. To achieve true redundancy a company needs to do semi-frequent testing to ensure that everything is working properly. Authorize.net might have had what was assumed a redundant system in place, but once the disaster happen they soon realized their system wasn't designed or configured properly. It is expensive and time consuming to test redundancy, let alone actually paying for the redundant equipment/staff/etc, but in times like this it shows how one gets their moneys worth in doing so.

    2. Re:Heh by Nutria · · Score: 2, Interesting

      there was a failure in the main/generator transfer switch which resulted in a fire. The sprinkler system activated.

      Where I work, the D.C. is in a sub-level basement. One day a few years ago, a dim-wit plumber was brazing a pipe with a propane torch, and swung it too close to a sprinkler head.

      Sprinkler went off and water did what it does: flow downhill, eventually pouring into the D.C., right onto the SAN storing "my" database...

      We were down for a few days. People couldn't access the web site or IVR, but fortunately it happened over a weekend, so the store-front operations weren't totally affected. Also, the system is part of an "asynchronously buffered" stove pipe, so operations "in front" of the downed machine just kept on processing.

      --
      "I don't know, therefore Aliens" Wafflebox1
  2. Also affecting Bing.com by Cothol · · Score: 2, Interesting

    Bing Travel servers are located in the same server hall. More info: http://isc.sans.org/diary.html?storyid=6721

  3. Failover Planning (and this broke FiOS too) by Cysgod · · Score: 4, Informative

    Apparently Verizon has a single point of failure for much of its FiOS for the metro areas of Western Washington state in this building as well so the FiOS customers are offline as well right now.

    • Clownshoes: Have no failover plan and be singly homed.
    • Meh: Have a failover plan.
    • Good: Have a failover plan that requires humans and exercise it regularly.
    • Better: Have a failover plan that is automated and exercise it regularly.
    • Best: Eliminate single points of failure so failover is turning off the flake or fail and going back to drinking a beer.

    Hot/Hot is always a more ideal solution than Hot/Warm or Hot/Cold for disaster recovery (and increasing equipment utilization/ROI), and this event demonstrates why.

    1. Re:Failover Planning (and this broke FiOS too) by Cysgod · · Score: 2, Informative

      Looks like from twitter comments that Verizon finished their failover since people's FiOS is coming back now.

  4. Fisher Plaza is a disaster response center by Anonymous Coward · · Score: 4, Informative

    Fisher Plaza is supposed to be a regional telecomm / communications / medical care hub for the Seattle area. It was designed and built to *not* crash, even in a magnitude 9.5 quake. Sounds like they've got work to do ...

  5. System failure by ErkDemon · · Score: 5, Informative
    There are four main factors that can take a part of a society's key infrastructure offline.

    1: ACTS OF GOD
    Meteor strike, lightnight strike, extreme weather ...

    2: ACTS OF MALICE
    War, terrorism, extortion, employee sabotage, criminal attacks ...

    3: WEAK INFRASTRUCTRUCTURE
    Underpowered networks, inadequate UPS backups, skeleton staffing, the shaving of safety margins as an efficiency exercise, inadequate rate of replacing old hardware ...

    4: MANAGEMENT ARSINESS
    This is when a problem starts, and the people in charge either don't know how to react, don't care, or prioritise face-saving over actual problem-solving. This happens when you get an outage, and instead of system management promptly calling all their critical clients to inform them, and warn them that there's maybe twenty minutes of UPS capacity in the routers if the system's not fixed by then, they instead cross their fingers and hope that things'll work out, and worry about what to tell the clients afterwards.

    Fisher Plaza seems to have suffered from a case of #4 recently, so it's not surprising that they've gone down again. The first time should have been the wakeup call to show them that their human systems were in need of an overhaul. Without that overhaul, you're setting up a dynamic in which the second time it happens, things are even worse (because now people are locked into defensive mode).

    No matter how advanced your technological systems, if the people running it have the wrong mindset, you're gonna go down. And when you go down, you're gonna go down far far harder than necessary.

    1. Re:System failure by SerpentMage · · Score: 2, Insightful

      5: Government...

      A government that decides to come to your headquarters and decides they want all of your hardware pronto...

      --

      "You can't make a race horse of a pig"
      "No," said Samuel, "but you can make very fast pig"
    2. Re:System failure by eln · · Score: 2, Funny

      3: WEAK INFRASTRUCTRUCTURE

      It's good to see that you've provided redundancy for the "TRUC" part of your infrastructure, but I'm concerned about the rest of it.

  6. Authorize.Net did have a backup by johnncyber · · Score: 3, Informative

    ...except it failed as well. From their twitter:

    "@gotwww The backup data center was impacted too. Don't have info as to why. The team is solely focused on getting us back up for now."

    1. Re:Authorize.Net did have a backup by ZorinLynx · · Score: 3, Interesting

      Sometimes folks set up a redundant system and forget to make one key piece redundant.

      Example: A server rack with two UPS systems. Each server has two power cords, one going to each UPS.. but the switch everything is plugged into only has one power input, so it's connected to UPS A.

      Power blinks and UPS A decides to shit itself. Rack goes down, even though all the machines are up, because the network switch loses power.

      Solution? An auto switching power Y-cable with two inputs, and one output. But 80% of people will be lazy and not bother. Oops.

      Happens all the time; I see it everywhere.

    2. Re:Authorize.Net did have a backup by linuxbert · · Score: 2, Insightful

      An auto switching power Y-cable with two inputs, and one output? ive never seen or heard of these.. Do you have a manufacturer or part number?
      id defiantly like some.

    3. Re:Authorize.Net did have a backup by funkboy · · Score: 2, Informative

      An auto switching power Y-cable with two inputs, and one output? ive never seen or heard of these.. Do you have a manufacturer or part number?
      id defiantly like some.

      Well, it ain't just a Y cable and they're not super-cheap, but still affordable if you're running anything that needs anywhere near the level of redundancy that they provide.

      It's called a static transfer switch and can be had for a few hundred bucks from most APC dealers (and MGE dealers, now that the merger is complete).

      What's nice about them is that unlike a UPS, colo providers don't mind if you stick an STS in your rack, as a UPS removes the colo provider's ability to completely shut off everything in the datacenter with their automated power systems if the shit really hits the fan (trust me, if there's a fire in the datacenter, you'd much rather have your servers suffer a cold shutdown than sucking in smoke and FM200 and all the other tasty stuff in the air, not to mention fanning or even directly contributing to an electrical fire if it's in your rack). An STS still enables them to completely kill the juice in an emergency while providing good & economic redundancy for single-feed machines, not to mention being close to 100% efficient.

  7. Geocaching.com too by dickens · · Score: 4, Informative

    And on a holiday. Bummer. :(

  8. The best line from the SANS ISC by Zocalo · · Score: 3, Interesting

    The media are also following the story, KOMO a local station was knocked offline but are broadcasting from a backup site.

    Way to go guys! At least two national, and maybe even international, ICT companies on whom numerous affiliates depend upon fail to provide for an adequate backup facility and continuity plan, yet the local AM radio station manages to pull it off. I'm guessing that some heads are gonna roll after the holiday weekend...

    --
    UNIX? They're not even circumcised! Savages!
  9. Re:No Backup?? by Nutria · · Score: 4, Insightful

    When this happens in this day and age the CIO should be fired!

    And if the CIO recommended a redundant D.C. but the CEO, CFO or Board rejected it as "too expensive"????

    --
    "I don't know, therefore Aliens" Wafflebox1
  10. Re:No Backup?? by sopssa · · Score: 3, Interesting

    I know redundancy and such is better on business stuff, but this kind of reminds me of the fact how customer lines have lots of single failure points aswell. There was a day when TeliaSonera's, large nordic ISP, DHCP stopped working, leading 1/3 of the whole country's residents without internet access. Turns out there was a hardware failure on the dhcp server, leading me to believe that they actually depend on just one server to handle all the dhcp requests coming from customers. They did fix it in a few hours, but it was still unavailable for the rest of the day because hundreds of thousands computer's were trying to get an ip address from it. That being said, I remember it happening only once, but it still seems stupid.

  11. According to KOMO news by PPH · · Score: 2, Informative

    ... who's broadcast facilities reside in this building (they were broadcasting from a park on Queen Anne hill this morning), it was due to a transformer vault fire. The resulting sprinkler operation rendered their backup generator inoperable.

    Being in the power biz, this sort of thing is to be expected in typical office buildings. Sometimes the power goes out. Live with it. What really puzzles me is how someone can take such a structure, install a raised floor and some big A/C units on the roof and sell it as a data center. This kind of crap goes on all the time, as I've seen purpose built data centers go down for single point failures.

    --
    Have gnu, will travel.
  12. Re:Oh, the humanity! by ErkDemon · · Score: 4, Insightful
    Actually -- in a totally unconnected incident -- my grocery shopping was disrupted today because (according to the note pinned to the closed store's shutters) the store's till server was down, and they'd shut up the shop while they waited for an engineer.

    I'm guessing that the server was probably local, possibly above the store, and might have gone fritzy in the heat.

    So, real-world implications of computer failure. A server goes down, and suddenly Eric Cannot Buy Cheese ("Aaaaiiiieeee!"). Eric has hard cash, store (presumably) has cheese, but store can no longer sell cheese to Eric. Or anything else.

    The shop "crashed".

    Okay, so I trudged off and did my grocery shopping elsewhere, but it was a little disturbing to think that we've already gotten to the point where a server problem can stop you buying food, in a "real" shop, with "real" money.

  13. Re:sloppy engineering by eln · · Score: 3, Funny

    Focusing on something that 99% of us screw up at one point or another, particularly when our primary focus at the time is probably getting the service back online rather than checking the calendar to see if it's Daylight Saving Time or not, for me is always a red flag that you're an insufferable pedant.

  14. Re:sloppy engineering by Phroggy · · Score: 2, Insightful

    "Our current estimate for re-establishing Bing Travel functionality is 5pm PST," says a notice at Bing

    When someone in a technical role screws up a timezone designation, for me that is always a red flag that they are sloppy with facts, and I need to closely watch their other decisions, actions and statements, because they may be in over their head.

    It's quite likely that this message was not posted by somebody in a technical role, but a managerial role. The technical people may very well have just said "by 5:00" or possibly "by 5:00 Pacific Time", and whoever posted the notice on the web site (while the technical people were busy working on trying to fix things) added "PST" instead of "PDT".

    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  15. Re:Oh, the humanity! by supernova_hq · · Score: 2, Insightful

    That's pathetic. I've seen stores stay open during 24 hour POWER FAILURES! Any manager who does not teach their employees how to manually do credit card transactions (yes you can do them by paper!) should never have been hired in the first place.

    When we lose power around here (once every 6 months or so), the stores stay open. They simply don't accept debit cards (which require a connection to the bank) until the power comes back on.

  16. Re:sloppy engineering by Achromatic1978 · · Score: 3, Informative

    Come on, the guy's sig is a link to some comic rant about "its versus it's" which, whilst it annoys me no end, is most definitely a good indicator that he is, no doubt, an insufferable pedant.

  17. Re:No Backup?? by SkyDude · · Score: 2

    When this happens in this day and age the CIO should be fired! And if the CIO recommended a redundant D.C. but the CEO, CFO or Board rejected it as "too expensive"????

    If that's the case, then the aformentioned officers should give up their pay to the thousands of merchants who lost their day's pay due to this problem. Yeah, like that'll happen.

    Phone lines occasionally go out and that might affect local merchants, but when it's a data center that handles the livelihoods of thousands of merchants, there needs to be much greater redundancy. The businesses that are affected by this are not all huge e-tailers either. Many are just small operators trying to make a living on the web. As it stands now, a merchant can't have multiple card processors unless he's willing to pay the monthly fees for two processors. I've never heard of that being done and doubt it would be feasible.

    Merchants affected by this will just have to suck it up, but for those who are not involved in e-commerce, this is a shining example of how doing business with credit card processors is dancing with the devil. They screw you on all of the charges, they screw you on chargebacks, and now they've screwed a lot of small business people by denying them income, probably because it wasn't cost effective to have a first class backup plan.

    Happy Independence Day!

    --
    == First cross river, then insult alligator.
  18. Huge portable generator arrives at Fisher Plaza by KPexEA · · Score: 2, Interesting
  19. Re:Oh, the humanity! by Spike15 · · Score: 3, Insightful

    Or (gasp!) make change without a computron! I wonder if they even train that in grocery stores anymore...scary, indeed.

    I think the bigger issue in this case would be manually looking up the price for every single item. We tend to simplify selling things manually in this way (manually processing credit card transactions, making change manually, etc.), when really when really the biggest problem is being without the UPC system.