Skip to main content
Twingate

Issue with Twingate

Partial outage Lasted 1h 40m · started · Twingate's page

Level
confirmed
Worst impact
Partial outage
Components
Authentication - Enterprise, Public API, Admin Console, MFA, Authorization, Connector Heartbeat
Down Index
34of 100

What to do

  • Check whether you use Twingate Authentication - Enterprise, Public API, Admin Console, MFA and 2 more. Check your stack

    Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.
  • Confirm your retries, queues and scheduled jobs caught up after the 1h 40m it lasted.

    Anything that failed between 2022-05-13 15:38 UTC and 2022-05-13 17:17 UTC may need a replay.
  • Subscribe to Twingate's feed to hear about the next one first. RSS feed

    https://down.guide/feed?provider=twingate works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from Twingate 6

  1. investigating

    We are currently investigating the incident.

    provider

  2. investigating

    We have seen improvements; we are monitoring the situation. We'll update as we find out more details on the issue.

    provider

  3. investigating

    We are continuing to investigate this issue.

    provider

  4. investigating

    The system is fully up. We will continue to monitor.

    provider

  5. resolved

    We are marking this issue resolved. The impact was between 8:31 am to 8:44 am. We will add the post mortem to the incident as soon as we have it ready.

    provider

  6. postmortem

    **Summary** At approximately 15:31 UTC on May 13, 2022, we received alerts from our monitoring systems pointing to a problem with Twingate. Our cloud provider’s load balancer started to return 502 \(Bad Gateway Error\) due to issues with our backend system. Looking into our backend logs, we noticed only 10-15% of requests were being handled properly and decided to restart our application pod in our Kubernetes cluster. Once the backend application pod restarted, the load balancer stopped returning 502 errors and things returned to normal around 15:44 UTC. During the outage, both our private and public APIs were affected. These APIs are used to drive most of the functionality that end users and administrators experience in Twingate. Specifically, this means that customers’ admin consoles were not accessible, the public API was not responsive to requests, and Clients and Connectors were unable to initiate authentication. Existing connections continued to function as a part of our reliability efforts completed in Q1 of 2022 \(provided that the clients and connectors were running the latest versions\). With this, we recommend that all of our customers upgrade their Clients and Connectors as soon as they can. **Root cause** After a detailed investigation, we found potential network glitches that caused connectivity issues and higher latency with different and unrelated parts of our system. While some components self-healed \(i.e. our Redis instance\), our main backend application was impacted. This was due to a much higher latency associated with a 3rd party service we use, leading to connection saturation of our API layer and the resulting rejection of additional requests, which manifested as 502 errors to the requestor. **Corrective actions** In order to mitigate the risk of this root cause impacting our service in the future, we have initiated a number of improvements: * Completed: We increased CPU and memory reservation for our backend application and relay pods. We decreased the connection timeout threshold for the third party so it doesn’t cause connection saturation again. * Short-term: We are working on adding more metrics and enabling more logging to help with investigation and post-mortem analysis in the future. * Medium Term: While we already had some circuit breaker capabilities and flags to turn off certain features, we will look for a complete service mesh solution with circuit breaker capabilities that should keep upstream applications and APIs running when issues and latencies arise for downstream dependencies.

    provider

Reports count in aggregate; nothing about you is shown.

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.

Questions about DWN-0eedc1cf55

Is Twingate still down?

No, this incident was resolved 2022-05-13 17:17 UTC. For Twingate's live state, see https://down.guide/twingate.

How long did it last?

1h 40m, from 2022-05-13 15:38 UTC to 2022-05-13 17:17 UTC, by the times Twingate posted.

What was affected?

Twingate named Authentication - Enterprise, Public API, Admin Console, MFA and 2 more.

What caused it?

Twingate hasn't published a root cause. If it does, it shows here.

Where does this come from?

Twingate's official status page, https://status.twingate.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.