# Ably: Elevated API Errors

- Impact (vendor’s label): major
- Status: postmortem
- Started: 2026-10-01 15:36 UTC · Resolved: 2026-10-01 16:03 UTC · Duration: 27 min
- Updates: 3
- [Vendor status page: https://stspg.io/v5stt2xyrp3f](https://stspg.io/v5stt2xyrp3f)
- [Company: Ably](https://rewindex.com/company/ably.md)

## Summary

Ably reported a major DDoS incident causing token-request errors across all Ably Realtime regions (503 responses) and intermittent ably.com unavailability. Recorded start: 2026-10-01 15:36 UTC; duration: 26 min, with token errors lasting approximately six minutes. Ably restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules. _(machine-written, sol)_
## Timeline of updates

- **investigating** 2026-10-01 15:36 UTC: We're experiencing an elevated level of API errors and are currently looking into the issue.
- **resolved** 2026-10-01 16:03 UTC: Between 15:30 UTC to 15:36 UTC there were elevated errors affecting token requests in all regions resulting in 503 error responses.
- **postmortem** 2026-10-01 17:20 UTC: On October 1, a distributed denial-of-service \\(DDoS\\) attack caused elevated token-request errors across all Ably Realtime regions for approximately six minutes and intermittent unavailability of \[ably.com\](http://ably.com). We restored token-request service by increasing capacity and added targeted traffic-blocking and rate-limiting rules to mitigate the attack. We are strengthening endpoint protection and reviewing our firewall controls to reduce the risk of recurrence.

## Rewindex changes for this incident

- 2026-10-01 15:36 UTC: [Major incident: Elevated API Errors](https://rewindex.com/change/ib78eaacf25bae6.md)


---
Canonical: https://rewindex.com/company/ably/incidents/nx8s78gq143r · Markdown: https://rewindex.com/company/ably/incidents/nx8s78gq143r.md · JSON: https://rewindex.com/api/v1/companies/ably/incidents/nx8s78gq143r · Generated 2026-10-18T09:45:57.835Z