Runtime on PREPRODUCTION — UBIKA Service Status

[Resolved] Disruption Detected

Mon, 14 Sep 2026 10:20:00 +0200

Dear Customer, Dear Partner,

An issue has been detected after a security runtime upgrade. JSON POST bigger than 704kB trigger an HTTP 500 error.

We have identified the issue at 14:45 CEST and are working on a fix.

The Ubika Support Team

A fix is currently building and will be rolling as soon as possible. (16:00 — Sep 14)

The fix is now deployed.

We apologise for the inconvenience.

The Ubika Support Team

[Resolved] Emergency hypervisor patching by our hoster (Januscape)

Thu, 09 Jul 2026 00:00:00 +0200

Dear Customer, Dear Partner,

Our hoster OVH is performing emergency patching of its entire hypervisor fleet against the Januscape vulnerability, on July 9 and 10 (Europe/Paris time). Our whole infrastructure is affected.

As a result, the infrastructure may experience some instability during this period. However, thanks to our design, the impact should remain limited (if any).

No action is required on your side.

The Ubika Support Team

Dear Customer, Dear Partner,

The maintenance performed by OVH has now been completed. No services impact was observed during the operation, and all systems remained fully operational.

The Ubika Support Team (09:00 — Jul 20)

[Resolved] Disruption Detected

Thu, 21 May 2026 09:45:00 +0100

Dear Customer, Dear Partner,

We experienced a high load DDoS attack from 09:45 a.m. to 09:47 a.m.

Traffic was impacted, resulting in slowdowns. The console was not impacted.

We have identified the bottleneck and are working to address it.

The Ubika Support Team

[Resolved] Disruption Detected

Wed, 20 May 2026 19:30:00 +0100

Dear Customer, Dear Partner,

We experienced a high load DDoS attack from 19:30 p.m. to 19:40 a.m.

Traffic was impacted, resulting in slowdowns. The console was not impacted.

We have identified the bottleneck and are working to address it.

The Ubika Support Team

[Resolved] Disruption Detected

Tue, 28 Apr 2026 08:50:00 +0100

Dear Customer, Dear Partner,

There are currently disruptions on the Cloud Protector platform.

All our teams are mobilized to get it back to 100% operational as soon as possible.

This ticket will be updated as the investigation progresses.

The Ubika Support Team

We experienced a DDoS attack from 8:50 a.m. to 11:10 a.m. The Cloud Protector platform is now fully operational again. Traffic was impacted, resulting in slowdowns, and some application logs were also lost. The console was not impacted. Actions have been taken to improve the anti-DDoS system as well as the scalability of the filtering environment. (11:10 — Apr 28)

[Resolved] Maintenance on Sep 18

Thu, 18 Sep 2025 08:00:00 +0200

Description: Software Upgrade
When: Expected Upgrade Start Date and Time: 18 September 2025 at 8:00am CET to 10:00am CET
Business Impact: Users that use GeoIp or IpRep in blocking mode may experience a short perturbation. It should last less than 1 minute.
Expected action(s) from customer: None.

We will be performing maintenance on our filtering cluster on Thursday 18 September 2025.

We apologize for the inconvenience caused by this upgrade. Please do not hesitate to contact our support team if you encounter any problems following this upgrade.

Update: Maintenance is over at 09:15am CET - everything went well.

[Resolved] Maintenance on Sep 17 - Postponed

Wed, 17 Sep 2025 08:00:00 +0200

Description: Software Upgrade
When: Expected Upgrade Start Date and Time: 17 September 2025 at 8:00am CET to 10:00am CET
Business Impact: Users that use GeoIp or IpRep in blocking mode may experience a short perturbation. It should last less than 1 minute.
Expected action(s) from customer: None.

We will be performing maintenance on our filtering cluster on Thursday 17 September 2025.

We apologize for the inconvenience caused by this upgrade. Please do not hesitate to contact our support team if you encounter any problems following this upgrade.

UPDATE: Maintenance planned on Sep 17 is postponed

[Resolved] DDoS attack

Sun, 03 Aug 2025 13:20:00 +0200

Dear Customer, Dear Partner,

A DDoS attack is ongoing since Friday, 01/08/2025, starting at 13:20 PM CEST.

The service remains operational. For now, the impact is very low. The disruptions are barely visible to the most sensitive probes. If the attack escalates, you can redirect your DNS to our new CNAME. You can find the CNAME in the asset configuration page.

The Ubika Support Team

Attack ended. (08:20 — Aug 4)

Attack remained under control with no visible impact.

[Resolved] Release causing latency

Tue, 22 Jul 2025 10:30:00 +0100

Dear Customer, Dear Partner,

Following a production release on our filtering clusters this morning, we observed a temporary increase in latency between 10:30 AM and 11:30 AM. The situation was fully resolved by 11:30 AM, and our teams have confirmed that all services are now stable.

This was an isolated and exceptional event.

Thank you for your understanding.

The Ubika Support Team

[Resolved] DDoS attack

Thu, 03 Jul 2025 08:20:00 +0200

Dear Customer, Dear Partner,

A DDoS attack is ongoing since Wednesday, 03/07/2025, starting at 8:20 AM CEST.

The service remains operational. Clients may encounter sporadic packet loss during TLS handshake. Browser usually recover well for such network errors at the cost of a small delay. API clients that do not retry on TCP error and monitoring probes may return errors.

We are currently investigating on a working workaround to this typology of attacks.

The Ubika Support Team

Attack ended. (08:20 — Jul 4)

New information have been collected and provided to OVHCloud to narrow down the root cause of the perturbations. Conclusions will be shared later after further analysis.

[Resolved] DDoS attack

Wed, 02 Jul 2025 08:20:00 +0200

Dear Customer, Dear Partner,

A DDoS attack is ongoing since Wednesday, 02/07/2025, starting at 8:20 AM CEST.

We are currently investigating on a working workaround to this typology of attacks.

The Ubika Support Team

Attack has reduced. We do not notice disruptions anymore. (11:30 — Jul 2)

Further tests have been performed and shared with our OVHCloud taskforce to exclude various root causes of the perturbations. Conclusions will be shared later after further analysis.

[Resolved] DDoS attack

Thu, 22 May 2025 08:20:00 +0200

Dear Customer, Dear Partner,

A DDoS attack is ongoing since Thursday, 22/05/2025, starting at 8:20 AM CEST.

The service remains operationnal with minimal impact. We are currently investigating on the attack typology before applying a workaround planned in collaboration with our hoster OVHCloud to completely cut down the attack.

The Ubika Support Team

Analyze is ongoing. The workaround has been applied by OVHCloud. Service should improve for those that are the most impacted (API consumers). (10:21 — May 22)

Attack has ended. (08:20 — May 23)

Network dumps have been captured before and after the workaround was applied by OVHCloud. Analyze will continue in collaboration with OVHCloud to understand the root cause of the sporadic packet loss and retransmission that was observed during the attack and address it.

[Resolved] DDoS attack

Wed, 12 Mar 2025 07:15:00 +0100

Dear Customer, Dear Partner,

A DDoS attack is ongoing since Wednesday, 12/03/2025, starting at 7:15 AM CET, targeting one of our customer.

IMPACT:

The service remain operational with a minor impact on the platform’s response time for browser clients.
However, probes and API clients may have issues contacting the service due to packet loss (without aggressive retries like web browser).

Update (11:00 — Mar 12)

Attack is still ongoing, but at very low rate. Impact should be nearly invisible for every workload.
We may have identified the source of the sporadic traffic loss, related to the attack typology. A fix will be deployed soon to address the issue.

Update (07:20 — Mar 13) ··

Attack ended at 7:15 AM CET on 13/03/2025. Traffic capture have been done both by UBIKA and OVH, various mitigations are studied to be more efficient at reducing the impact of those attacks.

The Ubika Support Team

[Resolved] SYN flood attack

Tue, 04 Feb 2025 07:15:00 +0100

Dear Customer, Dear Partner,

A SYN Flood attack is ongoing since Tuesday, 04/02/2025, starting at 7:15 AM CET, targeting the load balancer upstream of the Cloud Protector infrastructure. The service remain operational with a minor impact on the platform’s response time. However, some probes turned red due to packet loss (without retries).

The Ubika Support Team

Update (08:00 — Feb 5)

The SYN Flood attack ended at 7:15 AM CET on Wednesday 05/02/2025.
Investigations to explain the packet loss are still ongoing with our hoster.

[Resolved] SYN flood attack

Tue, 31 Dec 2024 07:23:00 +0100

Dear Customer, Dear Partner,

A SYN Flood attack occurred on Tuesday, 12/31/2024, starting at 7:00 AM, targeting the load balancer upstream of the Cloud Protector infrastructure. The service remained operational with a minor impact on the platform’s response time. However, some probes turned red due to packet loss (without retries). The attack was moderate and ended on Wednesday, 01/01/2025, at 7:00 AM.

The Ubika Support Team

[Resolved] Disruption Detected

Sun, 25 Aug 2024 15:10:40 +0200

Investigating - We are investigating a potential issue that might affect the uptime of one our of services. We are sorry for any inconvenience this may cause you. This incident post will be updated once we have more information. This is an automatic post by a monitor bot.

[Resolved] Disruption Detected

Sat, 24 Aug 2024 23:51:42 +0200

[Resolved] Disruption Detected

Fri, 23 Aug 2024 22:07:41 +0200