The Duo Site Reliability Engineering (SRE) team is scheduling regular maintenance on the DUO63 deployment.
The goal of this maintenance is to better balance authentication traffic across all Duo deployments in our continued efforts to provide a high performance and resilient service.
We expect minimum user impact since each specific migration window will occur during non-peak times for your organization.
Do I need to take action?
If your organization has strict IP filtering/firewall rules in place, you should ensure that all Duo IP ranges listed here https://help.duo.com/s/article/1337 and DNS names exist in any filtering rules if firewalls, SSL inspection, or other proxy rules whitelist communication to specific Duo IP ranges. In the event of an outage or failure, Duo’s service could automatically failover to any IP in those ranges. Otherwise, no action is required.
How does this migration affect you?
During the migration, we expect minimum intermittent authentication failures when users attempt to log in to Duo protected applications.
Users may need to retry the authentication or potentially wait a few minutes before attempting another login.
After the migration Duo Administrators with the Owner and Administrator role will have their notification settings for the Duo Status Page https://status.duo.com/ adjusted to reflect the new deployment within 24 hours.
Duo Administrators with the other roles will need to update their Duo Status Page preferences manually using the steps in https://help.duo.com/s/article/2060.