<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:139151605;
mso-list-type:hybrid;
mso-list-template-ids:692210110 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Good morning,<o:p></o:p></p>
<p class="MsoNormal">This month has been somewhat rocky with respect to our delivery of bandwidth services to schools and governments. This is exceptionally frustrating given our determination to provide best-in-class services to our client organizations.
We want everyone to feel confident that MVECA solutions are solid and dependable and we are working to ensure that our network services continue to meet all of your needs. Some of our client organizations have expressed concern about network events that have
occurred in September, so I wanted to provide a recap and explanation for each of these:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="mso-list:l0 level1 lfo1">On September 3<sup>rd</sup>, OARNet made a configuration change that allowed more traffic to be routed to their Internet2 peer without making a corresponding change to the bandwidth caps they had previously
applied to our local Internet2 connections. This did cause significant slowdowns but was resolved quickly when we shut down our Internet2 peer locally and pushed all traffic to the regular internet peer. We escalated first to OARNet’s network support team
and then to their leadership and the problem was corrected. We have since turned our Internet2 peer back on and are seeing improved overall performance. We have been frustrated that OARNet issued no statement on this that we could utilize to help our client
organizations understand what happened. Please know that this was outside our control and upstream from MVECA. Despite this, we do take full responsibility for all network services our clients consume and will continue to drive the support process even when
working with outside support organizations. We do appreciate the fact that OARNet leadership was quick to respond once we escalated above their regular network helpdesk.<o:p></o:p></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1">On Thursday September 23<sup>rd</sup> and Saturday the 25<sup>th</sup> we had severe slowdowns and outages related to denial of service incidents. The worst of these was on Thursday the 23<sup>rd</sup>
at around 10:30 a.m. Both of these outages were related to a network flooding event known as TCP or SYN Flood. A SYN Flood is a common form of Denial-of-Service (DDoS) attack that can target any system connected to the Internet and providing Transmission
Control Protocol (TCP) services. A SYN flood is a type of TCP State-Exhaustion Attack that attempts to consume the connection state tables present in many infrastructure components, such as load balancers, firewalls, Intrusion Prevention Systems (IPS), and
application servers. This type of DDoS attack can take down even high-capacity devices capable of maintaining millions of connections (such as those at MVECA). After the incident on the 23<sup>rd</sup> and with the help of our firewall manufacturer, MVECA
was able to put in place additional scripts and protections that would help us identify and eliminate the source of these attacks. When the additional incident occurred on Saturday, we were able to track and block the malicious traffic entirely. We have
also put in place additional detection scripts, more stringent buffer and connection limits, and other configuration changes that will ensure that this type of attack does not have the same impact again.<o:p></o:p></li></ol>
<p class="MsoNormal" style="margin-left:.25in"><o:p> </o:p></p>
<p class="MsoNormal">Again, we apologize that this has occurred and want to assure everyone that MVECA’s team is continuously on the job and working to eliminate all potential threats and disruptions. Unfortunately, all large networks are susceptible to these
sorts of incidents. With MVECA, however, you have one throat to choke with respect to network operations. The MVECA team will work to mitigate and avoid disruptions in every instance and will continue to provide comprehensive support on all network services.<o:p></o:p></p>
<p class="MsoNormal">Please contact me directly with additional questions or concerns.<o:p></o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal">Thor<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Thor Sage<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Executive Director<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Miami Valley Educational Computer Association<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">937-767-1468 x3101<o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://www.mveca.org/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="174" height="64" style="width:1.8125in;height:.6666in" id="Picture_x0020_1" src="cid:image001.jpg@01D7B443.4C4A1150" alt="http://www.mveca.org/images/logo.gif"></span></a><span style="color:#1F497D">
</span><a href="https://www.linkedin.com/company/mveca/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1026" src="cid:image002.jpg@01D7B443.4C4A1150" alt="i"></span></a><a href="https://twitter.com/mvecarcog"><span style="color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="Picture_x0020_2" src="cid:image003.jpg@01D7B443.4C4A1150" alt="t"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="color:#1F497D">Not-for-profit Technology Services for Education and Local Governments<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>