[2022-08] 搬瓦工最近几天 DC6、DC9 机房不稳定/经常连不上/间歇性丢包率非常高的原因

最近几天大家如果使用搬瓦工 DC6、DC9 CN2 GIA 或者 DC3 CN2 GT 等机房，应该也都发现了，经常会出现大规模丢包，甚至是超大规模丢包，有时候丢包率达到了 90% 以上，然后过一阵子又好了，然后过一阵子又这样，总之反反复复的，非常令人难受。关于这个问题，搬瓦工中文网也和客服反馈过几次，但是客服都是说这个问题他们已经解决了。并且查看 bwhstatus.com 也没有发现类似的问题公告。那么这个问题到底是因为什么呢？今天看到有网友分享了一个客服的回复，终于排查到问题并且进行了解决，下面一起看一下。

一、搬瓦工丢包率高不稳定的原因

下面是关于搬瓦工丢包率高不稳定的客服答复，翻译成中文了。

你好，

在过去几天对此问题进行故障排除时，我们发现其根本原因是同时针对数百个 IP 的周期性 UDP 泛洪。

由于每次洪水的持续时间非常短（每个目标 IP 几秒钟）并且每秒数据包数量相对较少（大约 1000 pps），因此我们的系统不足以触发警报和采取对策。

遗憾的是，中国电信的 CN2 GT/GIA 网络无法应对这种类型和规模的洪水。它根本没有所需的容量。

随着我们现在对情况有了更好的了解，我们联系了几家在中国提供 DDoS/洪水保护的公司，并联系了我们知道过去处理过类似攻击的几位业内人士。

虽然我们知道这种情况让所有相关人员感到沮丧，但我想向您保证，我们正在 24/7 全天候工作，以尽快找到解决方案。从我们目前收到的反馈来看，我们应该能够在接下来的几天内建立一个体面的保护。

同时，在我们与相关组织合作制定永久性解决方案的同时，我们对基础设施进行了更改，以便在我们制定永久性解决方案时能够更好地吸收洪水并在我们这边进行处理。今天我们还要求我们的上游供应商配置简单的 ACL 来过滤掉特定的 UDP 泛洪，而且它似乎工作得相当好。如有必要，我们将调整这些 ACL。

今天做了以上改动后，情况稳定，所有服务都正常启动运行。但我们并没有休息并继续我们的内部和外部工作，以获取永久和可靠过滤所需的资源。

谢谢你。

以及英文原文：

Hello,

While troubleshooting this issue over the past few days, we have discovered that the root cause of it is a periodic UDP flood targeting hundreds of IPs simultaneously.

As each flood is very short in duration (a few seconds per target IP) and relatively small number of packets per second (around 1000 pps), it was not enough for our systems to trigger alerts and engage countermeasures.

Regretfully, China Telecom’s CN2 GT/GIA networks are not capable of handling floods of this type and scale. It simply does not have the required capacity.

As we now better understand the situation, we have connected with a few companies who provide China-based DDoS/flood protection, as well as reached out to several people in the industry that we know dealt with similar attacks in the past.

While we understand that this situation is frustrating for everyone involved, I would like to reassure you that we are working 24/7 to get a solution in place — as soon as humanly possible. From the feedback we have received so far, we should be able to set up a decent protection within the next few days.

Meanwhile, while we are working with relevant organizations on a permanent solution, we have made changes to our infrastructure to be able to better absorb the floods and deal with them on our side while we are setting up a permanent solution. Today we have also asked our upstream providers to configure simple ACLs to filter out the specific UDP floods, and it seems to have worked reasonably well. We will adjust these ACLs if/when necessary.

After the above changes have been made today, the situation is stable and all services are up and running normally. But we are not resting and continuing our work internally and externally to acquire resources needed for permanent and reliable filtering.

Thank you.

从最近几天的表现来看，确实很少再听到有朋友反映丢包率高或者是断流的现象了。

二、搬瓦工 DC6、DC9 套餐整理

其实搬瓦工 DC6、DC9 机房还是非常好用的，这次不稳定也是因为遭受了攻击。所以如果说要推荐，那么还是会推荐搬瓦工 DC6、DC9 机房的套餐，毕竟性价比相对是最高的。其他套餐比如中国香港 CN2 GIA 或者日本东京 CN2 GIA 那也太贵了。

三、搬瓦工新手优惠套餐和教程

搬瓦工最推荐套餐

1. 搬瓦工优惠码：BWHCGLUKKB
2. 搬瓦工购买教程：《搬瓦工新手用户注册和支付宝购买图文指导教程》

选择建议：

• 入门：洛杉矶 CN2 套餐，目前最便宜，可选 DC3 CN2/DC8 ZNET 等机房，CN2 GT 线路，入门之选。
• 推荐：洛杉矶 CN2 GIA-E 套餐，速度超快，可选 DC6 CN2 GIA-E/DC9 CN2 GIA/日本软银 JPOS_1/联通荷兰 EUNL_9 等机房，性价比最高。
• 高端：香港 CN2 GIA 套餐/东京 CN2 GIA 套餐，价格较高，但是速度、延迟、丢包等方面无可挑剔。