Slashdot Mirror


Datagram Recovers From 'Apocalyptic' Flooding During Sandy

1sockchuck writes "During SuperStorm Sandy, few data centers faced a bigger challenge than the Datagram facility in lower Manhattan. The storm surge from Sandy flooded its basement, disabling critical pumps. 'It was apocalyptic,' said CEO Alex Reppen. 'It was like a tidal wave over lower Manhattan.' While companies like CoreSite dealt primarily with the loss of ConEd power, the Datagram team sought to recover operations in an active flood zone. Why was mission-critical equipment in the basement? Because city officials restrict placing fuel tanks on rooftops and upper floors, citing concerns about diesel emerging from the 9-11 attacks."

18 of 114 comments (clear)

  1. Smart thinking by Qzukk · · Score: 5, Insightful

    Everyone knows that flying airplanes into the tops of buildings happens more often than floods in the basement. Gotta keep the priorities straight.

    --
    If I have been able to see further than others, it is because I bought a pair of binoculars.
    1. Re:Smart thinking by sumdumass · · Score: 4, Insightful

      Well, if gravity....

      Never mind. I doubt you will understand.

      The problems with fuel taken away from 9/11 wasn't that planes will fly into the roof. It's that fuel is a liquid and it is subject to gravity which means anything puncturing the tanks will cause it to leak down the building whether it is on fire or not. So imagine a lightning strike happens and years the side of the tank out. It caught fire and is now seeping down the stair well and over the sides of the building and through the crack in the roof that got there by the initial explosion caused by the lightning. This can quickly engulf a building and make escape routes impassable.

      Lightning, contractor errors, equipment malfunctions, sabotage, all happen more then floods.

    2. Re:Smart thinking by torkus · · Score: 5, Informative

      I'm sorry but how often does lightning crack the roof of a skyscraper after splitting open a double-walled fuel tank all while missin the lightning rods? That also assumes an exposed tank on the roof. Generators and similar equipment is typically anywhere above the 5th floor. For example the new 4WTC building has it's generators on the ~50th floor.

      Equipment malfunction or sabotage could easily have the basement pumps pushing diesel fuel into a huge puddle in the generator room that's on fire. When, excluding 9/11, did generator fuel spill from a roof tank in a skyscraper in the manner you describe?

      It's overreaction to a single event. Just like every plastic bag is labeled to remind you not to let infants play with them, poison labels also explicitly state not to eat, and anything with an open flame usually says it's hot.

      There are many disadvantages to putting critical infrastructure in the basement as well...as we've seen.

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    3. Re:Smart thinking by rts008 · · Score: 2

      Yes, it is infinitely safer to store a large quantity of fuel in the basement, near the foundation of the building, so if somebody were to figure out a way to explode that fuel it would...

      destroy the foundation of the building

      You apparently, don't know a lot about demolitions.
      Unless you add in a sophisticated (in context of discussion...) apparatus to convert those aforementioned storage tanks into a fuel-air explosive/explosion(F.A.E.), then your fear 'only' results in a wicked fire. Yeah, bad, but not as bad as you paint the picture.

      To 'destroy the foundation of the building', you need to target the structural supports with adequate force in the correct direction.

      It is much easier to convert rooftop (or similar) fuel-tanks into F.A.E., than it is to take down a building.

      P.S. The 'terrorists' get much more bang for the buck with a F.A.E. than taking down a single building....do some research/education/experience....it's fun...Mythbusters style!

      Having said all of that, well, I don't like the seemingly lack of balls and backbone recently from USA folk and our society that has led me to expect a 'protect me from x! to change easily, or overnight (that attitude enables this mindset, IMHO), sigh!, I hope for the best.

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
    4. Re:Smart thinking by sumdumass · · Score: 2

      You may understand gravity but you fundamentally fail at understanding risk. Diesel is not some highly explosive mixture that will give off deadly vapours and ignite at the drop of a dime. If lighting strikes a diesel tank what you end up with is ... a diesel tank. nothing more. It won't catch fire. Throw a match into it it won't catch fire. Electrical faults and it won't catch fire.

      Um.. you are assuming to much. The lightning doesn't need to ignite the diesel fuel, it can ignite something else. The lightning will not magically disappear once the fuel tank is hit. And yes, diesel will ignite with an open flame, it's the same as kerosene. It's true it is safer then gas and doesn't have explosive vapors, but a lightning strike can cause the pressure inside the tank to build faster then the venting can handle. If this causes an increase to a certain point, the diesel fumes do become combustible - it's how a diesel engine works.

      Oh, and BTW, Diesel is classed as a hazardous material. I'm not sure what you mean by that comment. In sufficient quantities, you are required to placard the tanks and if transporting, you need a hazardous material endorsement and could need to placard the vehicle. In fact,it only takes like 200 gallons (400 lbs) before some of those hazardous material shipping rules kick in.

  2. Hmmm... by Anonymous Coward · · Score: 5, Funny

    If only there was some sort of technology that allowed us to keep fuel in one place and the generators somewhere else...

    1. Re:Hmmm... by rubycodez · · Score: 4, Funny

      we could invent a flexible transport pathway for fluids analogous to an electrical wire, perhaps call it a wet-wire. and some kind of electrical pushing device to move fuel uphill through the wet-wire, maybe call it a cycling wetstuff-pushee.

  3. Just the tanks? by Rich0 · · Score: 4, Interesting

    Well, if the ordnance pertains to fuel tanks specifically, why not put waterproof tanks in the basement, and run sealed lines (including venting) up from there, locating the pumps somewhat higher. Obviously you're limited as to how much higher the pumps can be, but you can draw fuel a fair bit upwards on vacuum (maybe 20 feet?). If you're allowed to send pressurized air down the vent you could put the pumps up higher - I'm not sure what the laws are around that. If there are concerns with pressurized air mixing with fuel, another option might be a tank with a rubber bladder inside where the space between can be pressurized with either air or fluid - that's how they do it in liquid fueled rockets. As long as the tank and lines are waterproof you could keep it in the basement and operate indefinitely - but you'd need to work out all the details (like refueling - if the tank has to operate under pressure then you need to have pressure on the fueling lines as well, and suitable couplings and all that, unless you have more than one tank and can operate on one while fueling another).

    All of that entails certain hazards - you'd want well-trained personnel to operate it - you're starting to resemble operations on a jet or spacecraft...

  4. Why? by NetNinja · · Score: 5, Insightful

    If you questioned why and you still placed your companies life in that data center you should be fired for stupidity.

    It's the same reason I won't place my companies data at a DC in a crowded downtown area. Sporting events, politcial events, terrorist events.

    If you say you don't have a choice then you haven't thought of alternative means. Cloud, managed hosting, or a more weather stable state.

    Lower Manhattan is pretty much land filled area and 911 showed how vulnerable the WTC was below ground. They were extremely concenred about the Hudson flooding lower Manhattan.

    Again if you placed your companies data at a DC in lower Manhattan you should be fired.

    1. Re:Why? by l00sr · · Score: 3, Insightful

      Again if you placed your companies data at a DC in lower Manhattan you should be fired.

      I don't know anything about Datagram, but there are legitimate reasons to have a DC in lower Manhattan... For instance, for latency-limited high-frequency trading operations. I don't know if this is the particular case with Datagram's clients, but the fact that DCs exist in a ludicrously high-rent area means that they probably exist there for a good reason.

    2. Re:Why? by onyxruby · · Score: 2, Interesting

      A /lot/ of servers that are used by trading companies that connect to exchanges are placed as physically close to the exchange as possible. The exchanges themselves have servers and fail over data centers in multiple locations. However the primary locations are surrounded by office towers that are chock full of servers from the trading companies. These servers were likely the majority of the ones that got hosed by Sandy.

      I did a bunch of work several years back with a number of exchanges and my budget was allocated in watts of power consumed instead of dollars. The buildings near the exchanges typically can't handle any more air conditioning and they will use power to ration how many system get installed into racks. Instead of working with rack density, cost or other factors, it was all based on watts. Location really was everything as delays were considered far more expensive than hardware.

      They do this for high frequency trading of course, as they felt it was always against their favor when their was a delay on a trade. Delays were measured in the milliseconds and a delay of even a 200 ms was enough to make the IT floor start to get animated. Once delays hit 300 ms the rooms was a screaming fury until the issues were fixed. Floor plans were open without offices to allow for workers to talk without walking. I set up a bunch of monitoring software and automated response systems that would help respond to certain events (for the servers themselves). Pretty neat stuff really, very interesting to work with.

    3. Re:Why? by torkus · · Score: 3, Informative

      Your information is either wrong or /extremely/ out of date...and you mistake what "the exchange" is these days. The major exchanges (NYSE and NADQ in particular) do not house their matching engines (which is effectively "the exchange") in/on/at their trade floors. They're all located outside of NYC in large datacenters where they colocate servers for HFTs and other customers. It would be impractical in the extreme to run the types of links used by HFT systems between offices in NYC (or anywhere outside of a datacenter.)

      They do, of course, have fail-over redundant datacenters.

      Also - Matching latency is measured in microseconds, not miliseconds. Taking a single millisecond, much less 100+ms, to match a trade would represent serious delays.

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
    4. Re:Why? by BruceCage · · Score: 2

      Just wanted to add: the Dutch production VPRO produced a documentary a while back that deals with this subject matter. From what I recall they actually "tour" the area where all these facilities are located nowadays.

      Backlight - Money and Speed: Inside The Black Box

      Money & Speed: Inside the Black Box is a true thriller that takes us to the heart of our automated financial world. On the basis of interviews with people directly involved and data visualizations to the millisecond, a reconstruction of the fastest and deepest drop in U.S. stock markets ever.

      --
      Perfect is the enemy of done.
  5. And Another Thing... by thaddeusthudpucker · · Score: 2

    Am I the only one who finds it irritating that everyone is calling it "Superstorm Sandy"? It was a HURRICANE. Let's call it what it really was!

    1. Re:And Another Thing... by Ixokai · · Score: 5, Informative

      That's what I thought at first, having lived through Andrew in Florida -- I was all, "psh, its only a category 1". However, thi sisn't a Yankees media situation. Sandy was significantly more powerful then the category would imply.

      For one thing, by the time it hit NYC, it was no longer a hurricane -- it had merged with one or two cold storm systems that were coming in from the other direction. This changed the dynamic of the storm significantly: whereas hurricanes gain their energy from the warm ocean waters, this type of storm gained its energy from the difference between the cold and hot storm systems merging together. Or something. (The precise details are not clear to me: I'm not a meteorologist)

      Sandy was also *huge* -- measuring the total energy in the storm, it was bigger then Katrina. Hurricanes can get intense but the brunt of their power is focused. They may have a lot of wind speed, and strictly by that measure Sandy wasn't very impressive... but when you have a cat 1 spread out as far as Sandy was, its pulling in a HUGE amount of water.

      It wasn't the wind that was so destructive here: it was the storm surge that the huge storm system brought with it.

      More sciency stuff at http://www.washingtonpost.com/blogs/capital-weather-gang/post/sandy-packed-more-total-energy-than-katrina-at-landfall/2012/11/02/baa4e3c4-24f4-11e2-ac85-e669876c6a24_blog.html (Warning: yankee media)

      But, really. Its not just rhetoric of omg the Yanks are finally getting hit that made this seem bad. It really was a very, very, very bad storm and the hurricane classification only makes it seem small.

    2. Re:And Another Thing... by torkus · · Score: 2

      It was hugely played up by the news. I *personally* was standing in battery park behind the cameras filming the reporters being 'blown around' by the wind at one point. Note: I was standing. Still. It was quite windy but by no means as windy as they flat-out /pretended/ it was.

      With that said, the storm surge was unprecedented (at least for the area) and disastrous. The odd part though, since it was water rising up from the ocean instead of rain coming down and flowing somewhere, was that some areas were practically dry and had no flooding at all while others...a bare foot lower in elevation...had 11 inches of water pouring into their basements. You have one store totally flooded and destroyed in a building still without power 20' across the street from another which had no damage at all.

      Had Sandy struck as a category 1 hurricane with rain typical for that kind of storm...NYC would be a very different place today.

      --
      You can get rich if you own a politician, but you have to be rich to buy one in the first place.
  6. Re:Just the tanks, generators, servers, data ... by pepty · · Score: 3, Insightful

    In this context doesn't it mean "your company’s information is safe, duplicated and available immediately and at any time."?

  7. 9/11 and Fuel Tanks by Y-Crate · · Score: 4, Informative

    Citing 9/11 is interesting in light of the NIST report:

    Did fuel oil systems in WTC 7 contribute to its collapse?

    No. The building had three separate emergency power systems, all of which ran on diesel fuel. The worst-case scenarios associated with fires being fed by ruptured fuel lines-or from fuel stored in day tanks on the lower floors-could not have been sustained long enough, could not have generated sufficient heat to weaken critical interior columns, and/or would have produced large amounts of visible smoke from the lower floors, which were not observed.

    As background information, the three systems contained two 12,000 gallon fuel tanks, and two 6,000 gallon tanks beneath the building's loading docks, and a single 6,000 gallon tank on the 1st floor. In addition one system used a 275 gallon tank on the 5th floor, a 275 gallon tank on the 8th floor, and a 50 gallon tank on the 9th floor. Another system used a 275 gallon day tank on the 7th floor.

    Several months after the WTC 7 collapse, a contractor recovered an estimated 23,000 gallons of fuel from these tanks. NIST estimated that the unaccounted fuel totaled 1,000 ±1,000 gallons of fuel (in other words, somewhere between 0 and 2,000 gallons, with 1,000 gallons the most likely figure). The fate of the fuel in the day tanks was unknown, so NIST assumed the worst-case scenario, namely that they were full on Sept. 11, 2001. The fate of the fuel of two 6,000 gallon tanks was also unknown. Therefore, NIST also assumed the worst-case scenario for these tanks, namely that all of the fuel would have been available to feed fires either at ground level or on the 5th floor.