Störungsverlauf von Uploadcare

1. 16. Juli 2026 um 08:42 UTCinvestigating

   Wir untersuchen derzeit ein Problem, das Website und Dashboard betrifft. Benutzer können eine erhöhte Anzahl von Fehlern auftreten. Unser Team arbeitet daran, die Ursache zu identifizieren, und wir werden ein Update bereitstellen, sobald weitere Informationen verfügbar sind. Wir entschuldigen uns für alle Unannehmlichkeiten und schätzen Ihre Geduld.

2. 16. Juli 2026 um 08:52 UTCidentified

   Unser Team hat die Ursache des Problems identifiziert, das sich auf Website und Dashboard auswirkt, und arbeitet aktiv an der Implementierung einer dauerhaften Lösung. Einige Benutzer können während dieser Zeit immer noch Verbindungsprobleme haben. Wir werden weiterhin Updates teilen, während wir Fortschritte in Richtung einer vollständigen Auflösung machen. Vielen Dank für Ihre anhaltende Geduld.

3. 16. Juli 2026 um 11:11 UTCidentified

   Unser Team arbeitet daran, eine dauerhafte Lösung zu implementieren. Einige Benutzer können während dieser Zeit immer noch Verbindungsprobleme haben. Wir werden weiterhin Updates teilen, während wir Fortschritte in Richtung einer vollständigen Auflösung machen.

4. 16. Juli 2026 um 12:51 UTCresolved

   Das Problem, das Website und Dashboard betrifft, wurde ab 11:30 UTC behoben. Benutzer sollten das Problem nicht mehr erleben. Unser Team überwacht weiterhin die Leistung, um Stabilität zu gewährleisten. Wir entschuldigen uns für jede Störung, die dieses Problem verursacht haben könnte, und schätzen Ihr Verständnis. Vielen Dank für Ihre Geduld und wenden Sie sich bitte an die Unterstützung, wenn Sie etwas Ungewöhnliches bemerken.

5. 21. Juli 2026 um 10:50 UTCpostmortem

   Am 16. Juli 2026, zwischen 07:55 UTC und 11:15 UTC (ca. 3 Stunden und 20 Minuten), waren Uploadcares Website und Kundenportal teilweise nicht verfügbar. Während dieses Fensters können betroffene Anfragen bei unseren CloudFront-Distributionen mit 504-Gateway-Timeout-Fehlern fehlschlagen und nie unsere Backend-Dienste erreicht haben. Die Störung wurde durch einen globalen Amazon Web Services CloudFront-Ausfall verursacht, der VPC Origins betrifft, den Ursprungstyp, auf den wir uns für Website und Kundenportal verlassen. Anfragen, die über VPC Origins weitergeleitet wurden, schlugen fehl, während CloudFront-Distributionen, die andere Ursprungstypen verwendeten, nicht betroffen waren. AWS führte den Ausfall später auf eine interne Kapazitätsbeschränkung in der Flotte zurück, die Verbindungen zu privaten VPC-Ursprüngen verwaltet, was dazu führte, dass die Routing-Konfiguration falsch an seine Netzwerkprozessoren verteilt wurde. Wichtig ist, dass unsere Kernplattformdienste – einschließlich Upload, Speicherung, Verarbeitung und Lieferung bereits zwischengespeicherter Dateien – von diesem Vorfall nicht betroffen waren und weiterhin normal funktionierten. Unsere Folgearbeit konzentriert sich darauf, einen bewährten, einsatzbereiten Fallback für diese Klasse von AWS CloudFront-Ausfällen zu erhalten. # **Zeitachse der Ereignisse ** Alle Zeiten sind in UTC am 16. Juli 2026. * **07:55 —** CloudFront-Metriken zeigen erhöhte Fehlerraten für unsere Website und Webclient-Distributionen. ***07:59 -** Unser Monitoring warnt, dass [uploadcare.com](http://uploadcare.com) nicht erreichbar ist. Unser Ingenieurteam beginnt sofort mit der Untersuchung. * **08:02 —** Wir bestätigen 504 Fehler für [uploadcare.com](http://uploadcare.com) und stellen fest, dass Anfragen unser Backend nicht erreichen. Andere unsere CloudFront-Distributionen bleiben gesund. * **08:07 -** Basierend auf dem Fehlermuster und der CloudFront-generierten 504-Fehlerseite wird CloudFront zu unserer primären vermuteten Ursache. Zu diesem Zeitpunkt hatte AWS noch keine Mitteilung veröffentlicht, obwohl die breitere Community begonnen hatte, CloudFront-Probleme zu melden. * **08:28 -** Wir bestätigen, dass das Problem unsere öffentlichen Websites und unser Kundenportal betrifft. * **08:42 —** CloudFront-Metriken zeigen eine Fehlerrate von ca. 30%. * **08:44 - AWS bestätigt einen globalen CloudFront-Ausfall im Zusammenhang mit VPC Origins - etwa 49 Minuten nach Beginn unserer Auswirkungen. * **09:23 -** Wir beginnen mit der Implementierung eines Fallbacks: Wechsel der betroffenen Ursprünge von VPC Origins zu internetorientierten Application Load Balancern \(ALBs\). ***10:58 —** Der Fallback wird zur Validierung in unserer Staging-Umgebung bereitgestellt. * **11:02 -** Der Fallback besteht bei der Staging-Validierung. Wir beginnen, die gleichen Veränderungen in Richtung Produktion zu rollen. * **11:15 —** AWS behebt den zugrunde liegenden Ausfall. Unsere Produktionswebsites und Kundenportale erholen sich vollständig und die Fehlerquoten gehen auf Null zurück. Da AWS sich zuerst erholte, war das Produktions-Fallback nicht erforderlich. Wir erklären den Vorfall für gelöst. # **Was gut gelaufen ist ***Schnelle Erkennung und Diagnose.** Unsere Überwachung erkannte den Fehler innerhalb weniger Minuten, und unser Team korrelierte ihn mit einem umfassenderen AWS-Problem und identifizierte die wahrscheinliche Ursache, bevor AWS den Ausfall öffentlich anerkannte. * **A validierte Minderung.** Während des Vorfalls haben wir ein Fallback – die Umstellung von CloudFront-Ursprüngen von VPC Origins auf internetorientierte ALBs – in unserer Staging-Umgebung entworfen, implementiert und validiert. AWS erholte sich, bevor wir es auf die Produktion anwenden mussten, aber dies ist jetzt eine bewährte Milderung für zukünftige VPC Origins-Vorfälle. ***Enthaltene Auswirkungen.** Da der Fehler auf Distributionen mit VPC Origins beschränkt war, blieb unsere Kernplattform - Datei-Uploads, Speicherung, Verarbeitung und Zwischenspeicherung - voll funktionsfähig. # **Was schief gelaufen ist * **Eine gemeinsame Ursprungsabhängigkeit.** Unsere öffentlichen Website- und Kundenportal-Distributionen stützten sich alle auf CloudFront VPC Origins, so dass ein einzelner AWS-Subsystemfehler sie zusammen mit keinem Failover betraf. # **Aktionspunkte ** * ** Halten Sie ein einsatzbereites CloudFront-Fallback bereit. ** Wir haben Infrastrukturänderungen vorbereitet und validiert, um die betroffenen Distributionen von VPC Origins zu internetorientierten ALBs zu wechseln, so dass diese Minderung schnell angewendet werden kann, wenn ein ähnlicher AWS-Ausfall erneut auftritt. Wir entschuldigen uns aufrichtig für die Störung, die dieser Vorfall verursacht hat, und für die Verzögerung bei der Kommunikation über unsere Statusseite. Während die Ursache ein AWS-seitiger Ausfall außerhalb unserer direkten Kontrolle war, sind wir bestrebt, unsere Exposition gegenüber dieser Klasse von Fehlern zu reduzieren und in Zukunft schneller und transparenter zu kommunizieren.

Automatisch aus der offiziellen Störungsmeldung übersetzt.

1. 19. Dezember 2025 um 15:23 UTCinvestigating

   We're seeing slow `from_url` uploads processing due to network performance issues at Cloudflare https://www.cloudflarestatus.com/ Since a lot of submitted URLs are hosted by Cloudflare, our `from_url` queue is processing slower than usual.

2. 19. Dezember 2025 um 15:37 UTCinvestigating

   `from_url` uploads are now processing normally. Our team monitors the situation.

3. 19. Dezember 2025 um 16:38 UTCmonitoring

   `from_url` uploads are processing normally. We're continuing to monitor the situation.

4. 19. Dezember 2025 um 17:31 UTCresolved

   Although Cloudflare's issues persist and the files they distribute take longer to download via `from_url` than others, our systems remain stable. We are closing the incident but will continue to monitor the situation.

1. 15. Dezember 2025 um 18:05 UTCinvestigating

   We are currently investigating this issue.

2. 15. Dezember 2025 um 18:07 UTCinvestigating

   We're experiencing performance degradation for Upload API. Uploads are finished with significantly higher latency.

3. 15. Dezember 2025 um 18:50 UTCinvestigating

   We are continuing to investigate this issue.

4. 15. Dezember 2025 um 19:24 UTCidentified

   The issue has been identified and a fix is being implemented.

5. 15. Dezember 2025 um 20:29 UTCidentified

   We are continuing to work on a fix for this issue.

6. 15. Dezember 2025 um 20:55 UTCidentified

   Currently there is a very big task queue accrued during initial production issue phase. We've fixed original issue and are working through this queue. All uploaded files should be accounted for eventually. For end users it still looks like uploads are not working. Affected endpoints: - `/from_url/` - `/base/`

7. 15. Dezember 2025 um 21:59 UTCmonitoring

   A fix has been implemented and we are monitoring the results. The upload "finish" wait times are still outside of norm.

8. 15. Dezember 2025 um 22:45 UTCmonitoring

   Extensive processing of Upload API backlog affects DB and therefore latency of REST API and Dashboard.

9. 15. Dezember 2025 um 23:15 UTCmonitoring

   DB performance is recovered along with REST API and Dashboard.

10. 16. Dezember 2025 um 00:10 UTCmonitoring

    We are continuing to monitor for any further issues.

11. 16. Dezember 2025 um 00:30 UTCmonitoring

    The Upload API is still experiencing degradation. You may see longer-than-usual upload processing times, as well as intermittent 5XX responses. We’re actively working to resolve the underlying issue and will continue to share updates.

12. 16. Dezember 2025 um 01:11 UTCmonitoring

    We experience more DB lateny issues.

13. 16. Dezember 2025 um 01:15 UTCinvestigating

    We experience more DB lateny issues. Investigating, looking for the source of the latency.

14. 16. Dezember 2025 um 03:06 UTCmonitoring

    A fix has been implemented and we are monitoring the results.

15. 16. Dezember 2025 um 03:32 UTCresolved

    The incident is resolved.

16. 17. Dezember 2025 um 12:11 UTCpostmortem

    # **Analysis of the December 15, 2025, Upload API Disruption** ## 1. Summary On December 15, 2025, the Uploadcare platform experienced a significant service disruption affecting the Upload API and REST API subsystems. The incident, spanning approximately ten hours, resulted in elevated error rates for file uploads, increased latency across API endpoints, and interruptions of Dashboard operations. ## 2. Root cause The root cause was a resource contention event on Amazon Elastic File System \(EFS\), aggravated by an observability side-effect. A monitoring agent, executing a metadata-heavy recursive file scan, monopolized the I/O capacity of the shared NFS mount points. This I/O saturation created a cascading failure due to a legacy architectural pattern where storage operations occur within active database transactions. Background Processing Workers, taking long time to read or write to the stalled filesystem, held open database transactions for a long time. This saturated the global connection pool \(PgBouncer\), causing a denial of service for Upload API HTTP Workers and other services attempting to run database queries, despite the underlying PostgreSQL engine remaining healthy. ## 3. Architectural context and system design The Uploadcare platform is designed for scale, but this incident exposed specific coupling risks between our storage, database, and monitoring layers. ### 3.1 Ingestion pipeline & worker roles The core of the affected system is the Upload API. It utilizes two distinct worker types: 1. Upload API HTTP workers. These synchronous workers handle incoming HTTP requests \(Direct uploads, Multipart, and `from_url` requests\). They ingest data and schedule tasks. 2. Background processing workers. These asynchronous workers pick up tasks from a queue to perform complex operations \(virus scanning, image validation, property extraction, etc\). Both worker types utilize a shared temporary staging area backed by Amazon EFS to maintain a POSIX-compliant shared state across the distributed fleet. ### 3.2 Observability stack To monitor the staging area's health, a Telegraf sidecar agent was configured to track file backlog depth. This was implemented via a standard Linux `find` command sequence. On a network filesystem \(NFS\), a recursive `find` forces a traversal of the directory tree over the network. As file counts grow, the cost of this operation increases linearly, generating a storm of `READDIRPLUS` and `GETATTR` RPC calls. ## 4. Timeline _All times are listed in Coordinated Universal Time \(UTC\)._ * **17:17:** System begins receiving a massive surge of `from_url` upload requests. This workload is write-heavy. * **17:17 – 17:23:** Upload API HTTP workers successfully ingest files and write them to EFS. However, Background processing workers \(responsible for processing and deleting files\) begin to slow down due to the increasing I/O load. The rate of file creation exceeds the rate of processing/deletion. The file count on the volume jumps from ~40 \(healthy\) to ~7,000. * **17:25:** The "Noisy Neighbor" effect begins. The Telegraf `find` command, attempting to scan 7,000\+ files, fails to complete within its 30-second timeout. We lose visibility of metrics related to the file staging area. * **17:30:** Multiple instances of the `find` command stack up. The resulting metadata storm heavily affects the NFS client's ability to process requests. Background processing workers become very ineffective. * **19:06:** PostgreSQL begins terminating client connections due to `idle-in-transaction` timeouts. This confirms workers are stuck holding connections. * **20:28 – 20:51:** Engineering attempts to horizontally scale the PgBouncers to absorb the held connections. This inadvertently pushes the upper layer PgBouncers toward their OS file descriptor limits. * **21:07:** Upper layer PgBouncer instances hit the Linux file descriptor limit \(`ulimit`\). New connections to this layer begin failing. * **21:28:** File descriptor limits are increased. Background processing workers begin to recover slowly as the pool stabilizes. * **23:30:** Background processing workers successfully process the backlog. The background task queue becomes empty. * **23:41:** Despite the background queue being empty, Upload API HTTP workers continue to exhibit "overload" behavior.  * **01:35 \(Dec 16\):** Engineering reconfigures Upload API HTTP workers to connect directly to the upper PgBouncer layer.  * **02:48:** EFS metrics reappear. * **02:58:** Engineers manually removed approximately 4,000 "orphaned" files that remained on the disk \(files where the background job failed during the crash and could not self-heal\). File manipulations on EFS become normal. * **02:59:** Database connection pressure vanished. Latency returned to nominal levels. Incident resolved. ## 5. Response Evaluation ### What went well * Proactive alerting. Our monitoring systems successfully triggered alerts for elevated wait times before customer reports of degradation began to surface, giving the team an early head start on triage. * Core database resilience. Despite the severe saturation of the connection poolers \(PgBouncer\), the underlying PostgreSQL database engine demonstrated remarkable stability. Resource utilization \(CPU/Memory\) on the database nodes remained nominal, preventing a total database meltdown. * URL API isolation. The URL API \(file processing and delivery\) remained fully operational throughout the incident. Its architectural isolation from the ingestion pipeline ensured that end-user access to previously uploaded files was never affected. ### What went wrong * Observability became the bottleneck. The monitoring agent \(`telegraf`\), designed to provide visibility, became the primary cause of the outage. The use of an active, heavy command like `find` on a network filesystem was a design flaw that turned a monitoring check into a Denial of Service attack on the NFS client. * Misleading initial signals. The initial flood of `idle-in-transaction` connections led the response team to focus on the database layer. It delayed the investigation into the storage layer. ## 5. Action Items * Eliminate "Noisy Neighbor" observability. Replace active, resource-intensive monitoring checks \(specifically the recursive `find` command\) with passive metrics. Transition to using AWS CloudWatch metrics or other side-channel indicators that do not consume client-side I/O credits or burden the EFS mount. * Enforce connection pool isolation. Reconfigure PgBouncer to implement strict resource bulkheading. Dedicate separate connection pools for the Upload API HTTP workers, REST API HTTP workers, and background workers. This ensures that a resource stall in the background worker fleet cannot starve the customer-facing APIs of database connections. * Decouple storage I/O from database state. Refactor the application logic to execute blocking file storage operations \(reading/writing to EFS\) _outside_ of atomic database transactions. This ensures that storage latency results only in slower worker throughput, rather than holding database connections open \(`idle-in-transaction`\) and exhausting the global pool. * Upgrade incident response tooling. Equip production containers and nodes with essential diagnostic capabilities and establish secure access protocols. This ensures engineers can diagnose kernel-level and network-level bottlenecks during active incidents. ## 6. Conclusion The December 15 disruption was a complex failure mode involving storage physics, monitoring side-effects, and database concurrency. By identifying the contention on the EFS mount \(caused by the monitoring agent\) as the root cause, rather than a hard AWS limit, we have a clear path to resolution. The removal of the invasive monitoring script and the decoupling of transactions will robustly insulate the Uploadcare platform from similar incidents in the future. We apologize for the disruption and appreciate the patience of our customers as we hardened our systems.

1. 20. Oktober 2025 um 09:48 UTCresolved

   On October 20, 2025, between 06:49 UTC and 09:27 UTC, a portion of our URL API service experienced a major disruption. The service responsible for real-time processing and transformation of uncached files was unavailable, resulting in failed requests for those specific operations. The delivery of already-cached files and all other Uploadcare services, including file uploading and management, were unaffected.

2. 20. Oktober 2025 um 09:53 UTCpostmortem

   On October 20, 2025, between 07:50 UTC and 09:27 UTC, a portion of our URL API service experienced a major disruption. The service responsible for real-time processing and transformation of uncached files was unavailable, resulting in failed requests for those specific operations. The delivery of already-cached files and all other Uploadcare services, including file uploading and management, were unaffected. The direct root cause of this incident was a major service outage in the Amazon Web Services \(AWS\) `us-east-1` \(N. Virginia\) region, specifically impacting AWS DynamoDB. During the incident, we also identified a critical flaw in our incident communication process: we were unable to access our Atlassian-hosted status page to provide timely updates to our customers. It was affected by AWS services disruption, too. Our key follow-up actions will focus on improving the architectural resilience of our services to reduce single points of failure and establishing a more robust, independent system for incident communications. ## Timeline of events All times are in UTC on October 20, 2025. * **06:49:** Our internal monitoring systems begin to alert on a significant increase in error rates and latency for the URL API service, specifically for requests involving uncached files. Our engineering team begins an immediate investigation. * **07:03**: Our engineering team localizes issue with DynamoDB. * **07:37:** The team attempts to update our public status page \(`status.uploadcare.com`\) to inform customers but is unable to log in to the third-party provider \(Atlassian Statuspage\). * **07:46:** We get to conclusion that the issue is related to DNS of DynamoDB. * **07:51:** AWS posts its first notification acknowledging increased error rates and latencies for multiple services in the `us-east-1` region. Our team correlates our internal alerts with this broader AWS issue. * **08:26:** AWS confirms that the issue is centered on significant error rates for DynamoDB in `us-east-1`, confirming our initial diagnosis of the root cause affecting our service. * **09:01:** AWS reports they have identified a potential root cause related to DNS resolution for the DynamoDB API endpoint and are working on mitigations. * **09:27:** Our internal monitoring shows that error rates for the URL API have returned to normal levels. The service is fully recovered and operational. We declare the incident resolved internally. ## What went well * Our internal monitoring systems detected the service failure immediately, allowing for a rapid start to our investigation. * Our engineering team was able to quickly correlate the internal issue with the external AWS service outage, preventing wasted time on internal diagnostics. ## What went wrong * **Architectural single point of failure:** Our URL API for uncached files had a hard dependency on a single service \(DynamoDB\) within a single AWS region \(`us-east-1`\). The failure of this service led directly to the failure of ours, with no mechanism for graceful degradation or failover. * **Failure of incident communication:** Our designated channel for customer communication, the status page hosted at `status.uploadcare.com`, was inaccessible to our team during the outage. This failure prevented us from providing timely and transparent updates to our users, which is a critical part of our incident response protocol. ## Action items * **Establish a redundant status communication channel:** We will set up a secondary, fully independent channel for incident communication. This will ensure that if our primary status page provider is ever unavailable, we can still communicate effectively with our customers. * **Architect for resilience and decentralization:** Our engineering team will conduct a full architectural review of the URL API service. The primary goal is to re-architect the service to remove DynamoDB in `us-east-1` as a single point of failure. This may involve implementing multi-region failover capabilities or introducing a more resilient data caching layer. * **Audit critical services for single points of failure:** We will expand our review to other critical services across the Uploadcare platform to identify and mitigate other potential single points of failure related to external, regional dependencies. We sincerely apologize for the disruption this incident caused our customers and for our failure to communicate the issue in a timely manner. We are committed to learning from this event and implementing these changes to build a more resilient and reliable platform.

1. 26. November 2024 um 14:56 UTCinvestigating

   We're experiencing an elevated level of URL API errors and are currently looking into the issue.

2. 26. November 2024 um 15:16 UTCinvestigating

   Systems are back to normal

3. 27. November 2024 um 09:14 UTCresolved

   This incident has been resolved.

4. 27. November 2024 um 09:36 UTCpostmortem

   ## Incident Summary On 26 November 2024, an issue with our URL API was identified, causing a partial outage of the service from 14:31 to 15:00 UTC. ## Timeline * **14:20 UTC** – A CDN configuration change was made to improve the Auto Format feature in the URL API. * **14:31 UTC** – Service degradation began as increased traffic overwhelmed our origin servers due to cache key changes. * **14:37 UTC** – Alert notifications were received by our team. * **14:58 UTC** – The CDN configuration was rolled back. * **15:00 UTC** – The incident was fully resolved, and service was restored. ## Root Cause The issue was caused by a CDN configuration change that altered cache key behavior, significantly increasing traffic to our origin servers. This overwhelmed our autoscaling groups, which hit their scaling limits, resulting in a service outage. ## Impact URL API degradation lasted for approximately 29 minutes. ## Challenges During Resolution This type of issue is difficult to catch in a staging environment because the traffic profile does not reflect production-level demand. Although the alert system worked as intended, delays in responding to the alert contributed to the resolution time. ## Resolution The configuration change was identified as the root cause and rolled back. The service stabilized immediately after the rollback, and full functionality was restored by 15:00 UTC. ## Action Items ### Short-term * Review and improve escalation processes for alert notifications to reduce resolution time. * Adjust staging environment testing to better simulate production traffic patterns for similar changes. ## Long-term * Assess autoscaling limits to ensure sufficient capacity for handling unexpected traffic spikes. We sincerely apologize for the disruption and are committed to learning from this incident to improve the reliability of our services. Thank you for your understanding and continued support.

1. 27. November 2024 um 10:18 UTCresolved

   Issue has been resolved

2. 27. November 2024 um 10:23 UTCpostmortem

   ## Incident Summary On November 25, 2024, from 16:01 to 19:44 UTC, the “Uploading from 3rd Party Services” feature of our platform was unavailable. This feature allows users to upload files from social networks and storage services like Dropbox, Facebook, Google Drive, and Instagram. ## Timeline * **15:50 UTC** – A server configuration update was initiated to streamline deployments in our Kubernetes environment. * **16:01 UTC** – The outage began as requests to the “Uploading from 3rd Party Services” feature failed to be processed. * **19:00 UTC** – Investigation revealed that the application networking was incorrectly configured. * **19:15 UTC** – A fix was implemented to re-configure the application networking. * **19:44 UTC** – The incident was fully resolved, and service was restored. ## Root Cause The outage was caused by a synchronization issue between repositories during a server configuration update. This misalignment between repositories, compounded by a lack of explicit configuration, led to the service outage. ## Impact For approximately 3 hours and 43 minutes, users were unable to upload files from third-party services. ## Challenges During Resolution This type of issue is difficult to catch in a staging environment because the traffic profile does not reflect production-level demand. Although the alert system worked as intended, delays in responding to the alert contributed to the resolution time. ## Resolution The application configuration was updated and service functionality was fully restored at 19:44 UTC. ## Action Items ### Short-term * Improve feature status monitoring and alerting to detect outages faster. ## Long-term * Improve synchronization processes between repositories to avoid dependency misalignments. ‌ We sincerely apologize for the disruption this caused to our users. We take this incident seriously and are committed to implementing the above action items to prevent similar occurrences in the future. Thank you for your patience and continued trust in our platform. If you have any questions or need further details, please don’t hesitate to reach out.

1. 25. September 2024 um 12:28 UTCinvestigating

   We're experiencing a slowdown in our Webhooks service.

2. 25. September 2024 um 12:29 UTCresolved

   This incident has been resolved. We apologize for any inconvenience this may have caused.

3. 26. September 2024 um 08:55 UTCpostmortem

   ## Incident Summary On 25 September 2024, an issue with webhook delivery was identified, affecting clients between 10:07 and 12:19 UTC. The delay impacted webhook notifications, with no data loss but a significant delay in processing and delivery. ## Timeline * 10:07 UTC – A system configuration change was made, which inadvertently disrupted webhook processing. * 10:07 UTC – Webhook delivery issues began. * 12:05 UTC – The problem was identified and resolved, with backlogged webhooks being processed. * 12:12 UTC – The first webhook was successfully delivered after the fix. * 12:19 UTC – All queued events were processed, with delivery confirmed for all affected users. ## Root Cause The issue was caused by a configuration change that resulted in the webhook delivery system not processing events correctly. Despite initial signs of system health, the disruption went undetected due to gaps in the system’s monitoring tools. ## Impact * Webhook delivery was delayed for approximately 2 hours. * Customers experienced delays in receiving event notifications. * No data was lost, but delivery delays were significant due to a backlog in event processing. ## Challenges During Resolution * Monitoring systems indicated that components of the webhook system were healthy, which delayed identification of the underlying problem. ## Resolution * Webhook processing was restarted, and we verified that all queued events were delivered without any data loss. * The incident was fully resolved by 12:19 UTC, with all webhooks processed and delivered. ## Action Items ### Short-term * Improve the system’s monitoring and alerting to better detect issues with webhook processing. ## Long-term * Explore options to improve the resilience of our webhook delivery system, including scaling the infrastructure to better handle failures.

1. 16. Juli 2024 um 14:34 UTCresolved

   2024-07-08 09:01:53 UTC REST API and Upload API became unavailable due to system misconfiguration. 2024-07-08 09:33:12 UTC We've identified the source of problems, deployed fixes. Service recovered. We are monitoring the situation.

2. 16. Juli 2024 um 14:45 UTCpostmortem

   ## REST and Upload API service degradation \(incident #wvjpwt1qtpkn\) **Date**: 2024-07-08 **Authors**: Arsenii Baranov **Status**: Complete **Summary**: From 09:01:53 to 09:33:12 UTC we've experienced higher latencies and in the end a complete outage of Upload and REST API. **Root Causes**: PostgreSQL performance degradation due to human-factor. **Trigger**: Misconfiguration. **Resolution**: Changed our DBA-related processes, fixed monitoring related issue. **Detection**: Our Customer Success team detected the issue and escalated to the Engineering team. **Action Items**: | Action Item | Type | Status | | --- | --- | --- | | Fix monitoring misconfiguration | mitigate | **DONE** | | Improve DBA maintenance approach | prevent | **DONE** | ## Lessons Learned **What went well** * Due to distributed nature of Uploadcare, this incident has no effect on most of our services. This degradation didn’t affect storage, processing and serving files that were already stored by Uploadcare CDN. * Our incident mitigation strategy was right and worked immediately. **What went wrong** * This incident was detected in non-automatic way due to alert misconfiguration. * We failed to process API request during the incident. ## Timeline 2024-07-08 _\(all times UTC\)_ * 08:00 Database maintenance started * 09:01 **SERVICE DEGRADATION BEGINS** * 09:23 Our customer success team escalates issue to Infrastructure team * 09:29 Issue localised and fixed * 09:33 **SERVICE DEGRADATION ENDS**

1. 24. November 2023 um 06:46 UTCresolved

   2023-11-21 17:40 -/json/ and -/main_colors/ operations returning 400 status

2. 24. November 2023 um 06:46 UTCpostmortem

   # -/json/ and -/main\_colors/ operations returning 400 status **Date**: 2023-11-21 **Authors**: Alyosha Gusev **Status**: Complete, action items in progress **Summary**: From 2023-11-21 17:40 to 2023-11-22 18:40 -/json/ and -/main\_colors/ operations started to return 400 status **Root Causes**: HTTP rewrites misconfiguration **Trigger**: Deploy of the new functionality that enables our customers to save more money on traffic, and end users to experience lower load times \(improvements to automatic image optimisation\) **Resolution**: Bugfix deploy **Detection**: Our automatic tests detected the issue **Action Items**: | Action Item | Type | Status | | --- | --- | --- | | Fix rewrites | mitigate | **DONE** | | Improve visibility of failing tests notification | prevent | **DONE** | ‌ ## Lessons Learned **What went well** * Problem was detected by automatic tests * Bugfix was deployed immediately **What went wrong** * We didn’t found out that tests were failing immediately ## Timeline All times UTC * 2023-11-21 17:40: **SERVICE DEGRADATION BEGINS**. Deploy of the new functionality * 2023-11-22 16:18: Team notices failing tests * 2023-11-22 16:19: Issue localised, Incident response team is formed * 2023-11-22 16:19: Team starts bugfix implementation * 2023-11-22 17:40: Fix deployed to production * 2023-11-22 18:40: Last cached error response expired * 2023-11-22 18:40: **SERVICE DEGRADATION ENDS**

1. 16. Oktober 2023 um 09:29 UTCmonitoring

   We've observed heightened latency and error rates for uncached requests to our CDN and image processing API from 6:00 to 6:45 UTC. This was primarily due to a surge in server load and a deviation in our capacity scaling mechanism. Currently we still experienced heightened load, while capacity scaling mechanism was fixed.

2. 16. Oktober 2023 um 09:34 UTCmonitoring

   We are continuing to monitor for any further issues.

3. 16. Oktober 2023 um 09:34 UTCresolved

   This incident has been resolved.

1. 2. Oktober 2023 um 17:05 UTCresolved

   From 14:15 to 16:45 UTC we’ve experienced higher latencies of from_url uploads and with video processing. We’ve identified the source of the problem, eliminated it and are monitoring the situation. These services are fully functional now.

2. 4. Oktober 2023 um 06:38 UTCpostmortem

   ## Upload API and Video processing services degradation \(incident #5r4zj8shr69c\) **Date**: 2023-10-02 **Authors**: Alyosha Gusev, Denis Bondar **Status**: Complete **Summary**: From 14:15 to 16:45 UTC we’ve experienced higher latencies of Upload API and with video processing due to very high interest in these services. **Root Causes**: Cascading failure due to combination of exceptionally high amount of requests to Upload API. **Trigger**: Latent bug triggered by sudden traffic spike. **Resolution**: Changed our throttling politics, increased resources for processing. **Detection**: Our Customer Success team detected the issue and escalated to the Engineering team. **Action Items**: | Action Item | Type | Status | | --- | --- | --- | | Test corresponding alerts for correctness | mitigate | **DONE** | | Improve our upload processing system to remove bottleneck that we found | prevent | **DONE** | | Fix service access issue for team members that form potential response teams | mitigate | **DONE** | ‌ ## Lessons Learned **What went well** * Due to distributed nature of Uploadcare, this incident has no effect on most of our services. This degradation didn’t affect storage, processing and serving files that were already stored by Uploadcare CDN. * Our incident mitigation strategy was right and worked immediately. **What went wrong** * This incident was detected in non-automatic way due to alert misconfiguration. * Due to hardening security standards in our organisation, not all of incident responders had access to Statuspage to update our customers in timely manner. ## Timeline 2023-10-02 _\(all times UTC\)_ * 14:15 Our upload processing queue start filling * 14:20 **SERVICE DEGRADATION BEGINS** * 15:23 Our customer success team escalates issue to Infrastructure team * 15:31 Issue localised * 15:41 Incident response team is formed * 15:51:13 Adjusted our throttling policies * 15:51:38 Increased number of processing instances * 16:40 **SERVICE DEGRADATION ENDS** Processing queues clear

1. 7. August 2023 um 11:33 UTCresolved

   We have experienced a service degradation from 05:08 to 05:10 UTC. The source of the problem was identified and we are working on the fix for the future.

1. 22. Juni 2023 um 11:41 UTCidentified

   We’re experiencing higher latencies of from_url uploads. Direct uploads are fully functional. We’ve identified the source of the problem and are working on the fix.

2. 22. Juni 2023 um 12:32 UTCmonitoring

   A fix has been implemented and we are monitoring the results.

3. 22. Juni 2023 um 13:20 UTCresolved

   This incident has been resolved.

1. 19. Juni 2023 um 13:37 UTCinvestigating

   We’re experiencing service degradation of uploads from cloud services (e.g. Facebook, Google Drive). We're currently investigating the issue. Direct uploads are fully functional.

2. 19. Juni 2023 um 13:42 UTCidentified

   The issue has been identified and a fix is being implemented.

3. 19. Juni 2023 um 14:36 UTCmonitoring

   A fix has been implemented and we are monitoring the results.

4. 19. Juni 2023 um 14:46 UTCresolved

   This incident has been resolved.

1. 12. Mai 2023 um 14:01 UTCresolved

   From 12:29 to 13:31 UTC we’ve experienced higher latencies of from_url uploads. Direct uploads were fully functional. We’ve identified the source of the problem, eliminated it and are monitoring the situation. The service is fully functional now.

1. 17. Februar 2022 um 15:03 UTCresolved

   Between 14:30-14:51 UTC customers may have experienced elevated levels of errors.

1. 7. Dezember 2021 um 17:28 UTCidentified

   We are experiencing elevated error rates for Webhooks service. We have identified root cause and we are actively working towards recovery.

2. 7. Dezember 2021 um 23:47 UTCmonitoring

   A fix has been implemented and we are monitoring the results.

3. 8. Dezember 2021 um 09:52 UTCresolved

   This incident has been resolved.

1. 22. Juli 2021 um 16:06 UTCinvestigating

   We are currently investigating the issue with DNS resolving.

2. 22. Juli 2021 um 16:42 UTCinvestigating

   We are continuing to investigate this issue.

3. 22. Juli 2021 um 16:44 UTCmonitoring

   The problems with DNS resolving recovered. We are still monitoring.

4. 22. Juli 2021 um 18:13 UTCresolved

   This incident has been resolved.

1. 10. Juni 2021 um 13:25 UTCinvestigating

   We are experiencing issues with DNS resolving of *.uploadcare.com

2. 10. Juni 2021 um 14:04 UTCidentified

   The issue has been identified and a fix is being implemented.

3. 10. Juni 2021 um 14:12 UTCmonitoring

   A fix has been implemented and we are monitoring the results.

4. 12. Juni 2021 um 20:19 UTCresolved

   No more issues with DNS resolving were detected.

1. 31. Mai 2021 um 18:25 UTCresolved

   Between 16:38-16:43 UTC customers may have experienced elevated levels of errors.