Facebook Suffers Global Outage, Claims DDoS Not the Cause

Facebook and its related properties, including Instagram and WhatsApp, are struggling to recover from a global outage that kept service offline for much of March 13. What took the Facebook services offline however is still unknown.

Facebook 2019 outage






The Downdetector website, where individuals report outage issues, was also flooded with updates from users reporting that they were unable to access Facebook. Users also started to use the hash tag #facebookdown on Twitter to complain about the global outage.

So What's Behind the Outage?

Whenever there is an outage of any sort, the first type of speculation is usually that the downed site was a victim of some form of cyber-attack. While Facebook has not publicly identified the root cause of its outage as of the time of this article's publication, it did note that at least one type of attack did not cause the issue.

"We're focused on working to resolve the issue as soon as possible, but can confirm that the issue is not related to a DDoS attack," Facebook wrote in a Twitter message.

A distributed denial of service, or DDoS, attack is a type of cyber-attack where a victim website is overwhelmed by an unsupportable volume of traffic. The deluge of traffic effectively renders the site unavailable, triggering the denial of service condition. 

The largest DDoS attacks on record have surpassed over 1T bps of attack traffic, which can be enough to cripple many types of sites. Facebook isn't an average website or service, however, and operates a massive globally distributed network. A DDoS attack that could take down Facebook would likely require attack bandwidth that to date has never been seen.

Is It a BGP Issue?

Some of the early speculation about the outage involved the Border Gateway Protocol (BGP) routing protocol. BGP is the protocol that is used to help route traffic around the internet and has previously been implicated in different outages.

In an email sent to eWEEK from a PR firm representing Netscout, the firm claimed that an accidental BGP routing leak from a European ISP to a major transit ISP resulted in "perceptible disruption of access" for a period of time. BGP route leakage involving Facebook has in fact happened before. In 2011, eWEEK reported that some Facebook traffic was routed to China due to a BGP routing issue.

Network intelligence platform vendor ThousandEyes reported that it did not see any BGP changes that were affecting Facebook and its related properties. ThousandEyes added that Facebook has its own backbone network and doesn't entirely rely on the public internet.

"Today starting at 9:25 AM PST Facebook users around the globe have had issues reaching their services," ThousandEyes wrote in its analysis. "Our tests show this is very likely an app-layer issue, as we see 500 Internal Server Errors being reported from various locations around the globe. #FacebookDown"

With a globally distributed, complex multiservice architecture, Facebook by design is highly resilient and most days is also highly available. Given that Facebook is a public company and the outage will undoubtably have some form of financial impact, the company will at some point need to publicly disclose what actually led to the outage. Until then, Facebook users and everyone else will likely just have to speculate about what actually went wrong.


Sean Michael Kerner

Sean Michael Kerner
