Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 04:31:47 JST Kevin Beaumont

   azureedge.net domain and related Azure services are expected to stop working very soon as Azure's provider, Edgio, has gone bankrupt.

   https://devblogs.microsoft.com/dotnet/critical-dotnet-install-links-are-changing/

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 04:35:15 JST Kevin Beaumont

     in reply to

     Azure Front Door impact, action required. https://learn.microsoft.com/en-gb/azure/frontdoor/migrate-cdn-to-front-door

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 04:39:36 JST Kevin Beaumont

     in reply to

     Edgio actually filed for bankruptcy many months ago but apparently everybody pretended it wasn't happening, then when it informed customers it was definitely going under a month ago, everybody was on holiday.

     See also DigiCert dropping IPv6 support etc.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 04:44:04 JST Kevin Beaumont

     in reply to

     • Andrew Bartlett

     @abartlet I suspect the MS stance in that blog is actually wrong, as everybody key involved will be on holiday tbh

   • Embed this notice
     Andrew Bartlett (abartlet@mastodon.nzoss.nz)'s status on Monday, 06-Jan-2025 04:44:05 JST Andrew Bartlett

     in reply to

     @GossiTheDog

     They say:

     Note
     The new CDN is path-compatible with those servers. It’s only the domain that needs to change.

     Why can't they just use a CNAME or a server that simply replies with a 301 redirect?

     Seems strange to me, but I am not a web dev.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 05:31:02 JST Kevin Beaumont

     in reply to

     Some answers to questions in the thread:

     Q) didn’t Akamai buy Edgio?

     A) no, they just purchased customer contacts (spoiler: sales calls are coming). Link: https://www.akamai.com/newsroom/press-release/akamai-announces-winning-bid-for-select-assets-of-edgio

     Q) How do you know Digicert use Edgio?

     A) nslookup something like Digicerts CRLs.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 06-Jan-2025 05:37:19 JST Kevin Beaumont

     in reply to

     Another hilarious one is look at all the things currently hanging on Edgio - from things like open source projects with one guy in Nebraska to cloud services, this may turn out to be a bumper quarter for Downdetector.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 07-Jan-2025 22:12:37 JST Kevin Beaumont

     in reply to

     Some more updates on the Edgio situation -

     - I was wrong about Akamai, they're currently running

     - Edgio network is 300 PoPs, 300tbps of capability, 2000 subnets

     - Akamai say the Edgio CDN service is due to terminate January 15th, so next Wednesday

     - There's shit loads of traffic to Edgio CDN services still

     - Azure DevOps blog on impact (where they recommend using connectivity to AzureEdge.net, which the MS .net team say is going away and is migrating away from) (🤷) https://devblogs.microsoft.com/devops/important-switching-cdn-providers/

   • Embed this notice
     RootWyrm 🇺🇦:progress: (rootwyrm@weird.autos)'s status on Tuesday, 07-Jan-2025 22:24:02 JST RootWyrm 🇺🇦:progress:

     in reply to

     @GossiTheDog so I can explain the whole "use azureedge.net wait no don't" thing.

     Microsoft is providing a method to migrate to Azure Front Door while retaining the *.azureedge.net domain, but passive (automatic) migrations will only get best effort.

     https://learn.microsoft.com/en-us/azure/cdn/migrate-cdn-to-front-door-retain-edge-domain

   • Embed this notice
     RootWyrm 🇺🇦:progress: (rootwyrm@weird.autos)'s status on Tuesday, 07-Jan-2025 22:30:24 JST RootWyrm 🇺🇦:progress:

     @GossiTheDog well, here's where it gets complicated. Read that article. We (as in .NET, speaking as a member of the Foundation and NOT FOR) do have reasons.

     Basically per MS, *.azureedge.net is a TEMPORARY solution only because of the CDN going poof, and customers should migrate to a custom domain ASAP. So, azureedge.net *is* essentially going away. Just not immediately going away.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 07-Jan-2025 23:32:21 JST Kevin Beaumont

     in reply to

     Probably the biggest surprise of the Edgio situation right now is Microsoft. e.g. there's still lots of Microsoft 365 services operating on Edgio CDN today, looking through proxy logs. I hope Microsoft is on top of this.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 07-Jan-2025 23:35:08 JST Kevin Beaumont

     in reply to

     Edgio have updated their website to say they're going under.

   • Embed this notice
     skryking (skryking@infosec.exchange)'s status on Wednesday, 08-Jan-2025 00:01:39 JST skryking

     in reply to

     @GossiTheDog is this related to the Digicert cdn change as well?

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:29:34 JST Kevin Beaumont

     in reply to

     I'm making a list of all the sites on Edgio which are about to break next week due to their bankruptcy, and there's so many it's difficult to know where to start, but Arsenal is pretty funny (Edgecast = Edgio).

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:31:17 JST Kevin Beaumont

     in reply to

     pour one out for Symantec customers

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:40:43 JST Kevin Beaumont

     in reply to

     this is great if you don't read the bit at the very top, lol

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:45:32 JST Kevin Beaumont

     in reply to

     🫡

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:46:45 JST Kevin Beaumont

     in reply to

     wonder which club :P

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:48:35 JST Kevin Beaumont

     in reply to

     things going well between Microsoft and Akamai

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 08-Jan-2025 06:50:08 JST Kevin Beaumont

     in reply to

     things going well for BT

   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Wednesday, 08-Jan-2025 18:29:55 JST Jérôme Meyer

     in reply to

     @GossiTheDog Overall traffic from Edgio seems to be about a tenth of what it was a month ago. Definitely interesting to see what traffic continues or suddenly stops, and indeed Microsoft is a bit all over the place with LinkedIn continuing still but Office mostly stopped yesterday.

     Kevin Beaumont repeated this.
   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Wednesday, 08-Jan-2025 18:29:55 JST Jérôme Meyer

     in reply to

     @GossiTheDog Also, worth noting that nearly all adult content sites stopped using Edgio in the second half of December, so in a way — they're better run than Amazon Prime Video or Samsung Bixby 🤷🏻♂️

   • Embed this notice
     Jérôme Meyer (jmeyer@infosec.exchange)'s status on Wednesday, 08-Jan-2025 18:29:56 JST Jérôme Meyer

     in reply to

     @GossiTheDog I was looking around for services still using Edgio in traffic delivery today, and for the most notable ones: Amazon Prime Video, Disney+, Samsung apps. (most other big players, like Microsoft for Xbox Live/updates, Paramount+, Playstation, and even Redtube stopped using them in early/mid December).

   • Embed this notice
     tan (wyldtom@chaos.social)'s status on Thursday, 09-Jan-2025 03:31:10 JST tan

     in reply to

     @GossiTheDog “You must migrate before January 7th 2025.” - Article posted on January 7th 2025

   • Embed this notice
     Halligan (halligan@infosec.exchange)'s status on Thursday, 09-Jan-2025 03:51:07 JST Halligan

     in reply to

     • tan

     @wyldtom @GossiTheDog Last edited on Jan 7th. That article has been there for longer.

   • Embed this notice
     Halligan (halligan@infosec.exchange)'s status on Thursday, 09-Jan-2025 03:51:07 JST Halligan

     in reply to

     • tan

     @wyldtom @GossiTheDog (I last read it on Dec 10th, so at least that long ago)

   • Embed this notice
     tan (wyldtom@chaos.social)'s status on Thursday, 09-Jan-2025 03:51:07 JST tan

     in reply to

     • Halligan

     @halligan @GossiTheDog ayy, that makes sense! It’s a bit unfortunate that there’s no “created at” information

   • Embed this notice
     atb (atb@cyberplace.social)'s status on Thursday, 09-Jan-2025 19:07:06 JST atb

     in reply to

     @GossiTheDog Both Symantec and Carbon Black uses Edgio and will switch to Cloudflare in the coming days.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 13-Jan-2025 21:53:59 JST Kevin Beaumont

     in reply to

     Symantec still haven't migrated away from Edgio CDN, which Akamai say is due to terminate in under two days. Lots of other orgs still using it. #edgio

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 13-Jan-2025 21:57:28 JST Kevin Beaumont

     in reply to

     Good news*, Arsenal have moved:

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 14-Jan-2025 02:30:13 JST Kevin Beaumont

     in reply to

     Waves at Symantec 👋 liveupdate.symantec.com is migrating to Cloudflare 🙌

     You might also want to migrate liveupdate.symantecliveupdate.com, which is on Edgio still.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 14-Jan-2025 02:36:26 JST Kevin Beaumont

     in reply to

     From prosperity here's the other Symantec AV update domain, liveupdate.symantecliveupdate.com, pending migration

     There's still several hundred sites I can see sitting on Edgio - be interesting to see if Akamai really do turn off the taps on Wednesday or not, there's some proper Indiana Jones style migrations happening this week.

     Quite a lot of the ones who've migrated have gone to Cloudflare, which must be a kick in the teeth for Akamai (having paid for the Edgio contracts).

   • Embed this notice
     Securopean (securopean@infosec.exchange)'s status on Tuesday, 14-Jan-2025 02:59:37 JST Securopean

     in reply to

     @GossiTheDog Better start work on the "due to an advanced state actor APT AI-infused cryptocyberattack, the following services are unavailable" press release.

   • Embed this notice
     wrosecrans (wrosecrans@mstdn.social)'s status on Tuesday, 14-Jan-2025 03:37:51 JST wrosecrans

     in reply to

     @GossiTheDog When I worked at EdgeCast a few years ago, a lot of our biggest customers were multi-CDN, so even if 100% of traffic is still going to Edgio, fallover should be trivial. They may just be hoping for no bill for this month ever showing up if they maximize traffic on the doomed company while it's still up.

     Then yeah, 1000 smaller sites will probably be down for days because the guy who set up CDN no longer works there.

   • Embed this notice
     wrosecrans (wrosecrans@mstdn.social)'s status on Tuesday, 14-Jan-2025 03:46:47 JST wrosecrans

     @GossiTheDog Whelp, when all hell breaks loose, I'd just like to take a moment to mention that I never personally worked on the DNS servers. So the main thing I'll be contributing this week from my experience at EdgeCast/Edgio in terms of expertise around mitigation plans is limited to watching it burn while eating some popcorn.