Search

Companies / Ably / incidents

Ably: Elevated API Errors

Impact: majorStatus: postmortemStarted Resolved (27 min)3 updatesSource: stspg.io (opens in new tab)
Summary

Ably reported a major DDoS incident causing token-request errors across all Ably Realtime regions (503 responses) and intermittent ably.com unavailability. Recorded start: 2026-10-01 15:36 UTC; duration: 26 min, with token errors lasting approximately six minutes. Ably restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules.

Machine-written from the archived incident (Sol). Check the timeline before relying on it.

Timeline of updates

  1. investigating

    We're experiencing an elevated level of API errors and are currently looking into the issue.

  2. resolved

    Between 15:30 UTC to 15:36 UTC there were elevated errors affecting token requests in all regions resulting in 503 error responses.

  3. postmortem

    On October 1, a distributed denial-of-service \(DDoS\) attack caused elevated token-request errors across all Ably Realtime regions for approximately six minutes and intermittent unavailability of [ably.com](http://ably.com). We restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules to mitigate the attack. We are strengthening endpoint protection and reviewing our firewall controls to reduce the risk of recurrence.

Rewindex changes for this incident

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab). Ably profile · Recent Ably incidents · Markdown · JSON