August 15, 2018 4:55PM BST August 15, 2018 3:55PM UTC
[Investigating] As of 09am 15th August 2018, Node4 have been aware of the discovery of a new “speculative execution side-channel" type vulnerabilities within Intel processors. Called L1 Terminal Fault (L1TF) or "Foreshadow", this vulnerability concerns processors with SMT technology which could allow malicious code running on one thread to access data from the other thread's L1 cache within a single core.
Of the 3 discovered variants only L1FT VVM could affect Node4 Cloud services. L1FT / Foreshadow vulnerability is extremely complex to implement and only a proof of concept , developed in the laboratory, validated its existence. While there is currently no single fix for the vulnerabilities, a number of vendors have released suggested mitigations and remediation(s). As these are released, we’ll assess, test, coordinate and deploy accordingly across our environment. We will communicate to affected customers if actions that would impact their environments are required.
Node4 takes security of its clients and its own infrastructure extremely seriously and work closely with our partners, manufacturers and publishers, to improve the security of our infrastructure every day.
This complex and evolving situation will be monitored by Node4 Security Operations Centre to ensure our customers’ environments are protected, and we’ll do that in the least impactful manner possible.
Node4 Technical Support
May 20, 2019 9:00AM - June 24, 2019 6:00PM BST May 20, 2019 8:00AM - June 24, 2019 5:00PM UTC
Leeds DC3 H1, Leeds DC3 H2, Leeds DC3 H3
Updated 28/05/2019 with new dates
We are performing some upgrade works on our Uninterruptible Power Supply (UPS) system in DC3 Leeds over the next couple of months
We do not expect any service interruption during these works, but there will be periods when we are commissioning new equipment that will be classed as "elevated risk" with short periods of maintenance bypass and running on generators. All these works are restricted to either the A or B feed at any one time. The alternate feed will always be available and UPS backed during any works.
We will publish separate notifications for each period of work, but the current program has commissioning dates as follows
20th May: Add 4th UPS to B Feed (purple) - COMPLETE
12th June (new date): Reconfigure A feed to prep for expansion (orange)
8th July: Add 4th UPS to A feed (orange)
18th July: Add 2nd UPS to Hall 4 Orange Feed
22nd July: Add 2nd UPS to Hall 4 Purple Feed
August 18, 2019 10:00PM - August 19, 2019 12:00AM BST August 18, 2019 9:00PM - August 18, 2019 11:00PM UTC
MPLS Services, N4Cloud Leeds
On 18-08-2019 22:00 Node4 Engineers will be carrying out work to upgrade the firmware on one of the core switches upstream to the cloud platform at Wakefield
We expect failover to be around 1-3 minutes or less while we re-route traffic around the core switch, you may experience slight degradation across MPLS and Internet transit paths while traffic is re-routed.
At Risk – 18-08-2019 22:00 – 19-08-2019 00:00
No downtime is expected, however services will be considered “At Risk” for the duration of the window.
Updates will be posted to N4Status during this planned maintenance.
Support & Feedback
Our network operations engineers will closely monitor the work and will do everything possible to minimise any inconvenience to you. If you have any problems with your platform after this time, or if you have any questions regarding the maintenance at any point, please call Technical Support at 0845 123 2229 or visit node4.co.uk/support.
While it is important for Node4 to perform maintenance such as this to ensure the quality of our network, we do everything possible to minimise any inconvenience to our customers. We appreciate your patience and welcome any feedback.
Node4 Technical Support