Microsoft’s Azure portal down following new claims of DDoS attacks

Re:Microsoft’s Azure portal down following new claims of DDo... by ojintoad on Friday June 09, 2023 @12:15PM (#36260064)

It's very odd because it's only new page loads. Existing metrics pages I've been refreshing keep showing new data.

[ Parent | on HN ]

Re:Microsoft’s Azure portal down following new claims of DDo... by tatersolid on Friday June 09, 2023 @12:17PM (#36260104)

We see the same thing. One of my team is sailing around in the portal, even opening new tabs and it all is just working.

But I can't create a new session, even when remoted into an Azure-hosted VM. All our servers and services seem to be running fine; it just seems to be the portal.azure.com website that is impacted.

[ Parent | on HN ]

Re:Microsoft’s Azure portal down following new claims of DDo... by mynameisvlad on Friday June 09, 2023 @12:43PM (#36260458)

That would be hitting separate API endpoints which are not hosted in the same place as the portal itself.

[ Parent | on HN ]

Re:Microsoft’s Azure portal down following new claims of DDo... by Izikiel43 on Friday June 09, 2023 @03:18PM (#36262729)

Probably because the actual portal service call happens at new page load. Metric pages and everything else are data plane/control plane info most likely, which is coming from other services.

An easy way to validate this would be using fidler or similar to analyze the traffic that happens in the loaded page.

[ Parent | on HN ]

Re:Microsoft’s Azure portal down following new claims of DDo... by mixdup on Friday June 09, 2023 @09:03PM (#36266488)

This is exactly the case. API calls/cli tools never went down because they tickle the control plane APIs directly, and the Portal also tickles those APIs directly. The Portal seems to just be a client-side web app, and the CDN serving that and what ever minimal server-side infra that makes login work, etc was what was targeted by the ddos

[ Parent | on HN ]