Changes / Ably / Elevated API Errors
Ably: Major incident: Elevated API Errors
Summary
Ably reported a major DDoS incident causing token-request errors across all Ably Realtime regions (503 responses) and intermittent ably.com unavailability. Recorded start: 2026-10-01 15:36 UTC; duration: 26 min, with token errors lasting approximately six minutes. Ably restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules.
Machine-written from the diff below (Sol; type: incident security). Check the diff before relying on it.
What changed
Before: not present
After: Elevated API Errors
Before: not present
After: major
Before: not present
After: postmortem
Before: not present
After: 2026-10-01 15:36 UTC
Before: not present
After: 2026-10-01 16:03 UTC
Before: not present
After: We're experiencing an elevated level of API errors and are currently looking into the issue.
Before: not present
After: Between 15:30 UTC to 15:36 UTC there were elevated errors affecting token requests in all regions resulting in 503 error responses.
Before: not present
After: On October 1, a distributed denial-of-service \(DDoS\) attack caused elevated token-request errors across all Ably Realtime regions for approximately six minutes and intermittent unavailability of [ably.com](http://ably.com). We restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules to mitigate the attack. We are strengthening endpoint protection and reviewing our firewall controls to reduce the risk of recurrence.
First version of this incident archived by Rewindex. View the live incident.
History of this incident
| When (UTC) | Change | Kind |
|---|---|---|
| Major incident: Elevated API Errors (this change) Ably reported a major DDoS incident causing token-request errors across all Ably Realtime regions (503 responses) and intermittent ably.com unavailability. Recorded start: 2026-10-01 15:36 UTC; duration: 26 min, with token errors lasting approximately six minutes. Ably restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules. | Major incident |