Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Is Apple down?

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 118 posts

Re: Ask HN: Is Apple down?

#61

Post by variant »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

I think something with DNSSEC:

https://puck.nether.net/pipermail/outages-discussion/2022-Ma...

Re: Ask HN: Is Apple down?

#62

Post by frays »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

Works with other DNS servers.

  $ nslookup developer-cdn.apple.com.akadns.net a.ns.apple.com
  Server:  a.ns.apple.com
  Address: 17.253.200.1#53

  ** server can't find developer-cdn.apple.com.akadns.net: REFUSED

  $ nslookup developer-cdn.apple.com.akadns.net 1.1.1.1
  Server:  1.1.1.1
  Address: 1.1.1.1#53

  Non-authoritative answer:
  developer-cdn.apple.com.akadns.net canonical name = world-gen.g.aaplimg.com.
  Name: world-gen.g.aaplimg.com
  Address: 17.253.121.201
  Name: world-gen.g.aaplimg.com
  Address: 17.253.121.202

Re: Ask HN: Is Apple down?

#64

Post by silisili »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

> Did they really want to point "developer.apple.com", a web site, to "developer-cdn.apple.com.akadns.net", which is a DNS server.

It's just a CNAME, meaning go look that up. It does not indicate that developer-cdn.apple.com.akadns.net is a DNS server.

The above seems to indicate that somewhere in the chain of resolving developer-cdn.apple.com.akadns.net, a DNS server refused the query. A dig +trace should indicate which.

Re: Ask HN: Is Apple down?

#65

Post by ninju »

mwnivek wrote: post #43
donohoe wrote: post #17

You wouldn't think it if you went by this: https://www.apple.com/support/systemstatus/

At the bottom of that status page, it says: Looking for developer system status? Find it here: https://developer.apple.com/system-status/ The link is currently not working...

Looks like that link is working now...and shows a page of all GREEN :-)

Re: Ask HN: Is Apple down?

#67

Post by jonfw »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

This looks like an Akamai DNS load balancing solution. It will route a user to an endpoint based on a bunch of statistics (think location, availability, latency, and/or load), and will often handle caching and DDOS protection as well

Re: Ask HN: Is Apple down?

#68

Post by lima »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

> Or am I misreading that.

Yes:

    developer.apple.com. 73 IN CNAME developer-cdn.apple.com.akadns.net.
    developer-cdn.apple.com.akadns.net. 73 IN CNAME world-gen.g.aaplimg.com.
    world-gen.g.aaplimg.com. 13 IN CNAME apple-c.g.aaplimg.com.
    apple-c.g.aaplimg.com. 8 IN CNAME apple-cf.g.aaplimg.com.
    apple-cf.g.aaplimg.com. 8 IN CNAME apple-lr.g.aaplimg.com.
    apple-lr.g.aaplimg.com. 14400 IN NS b.gslb.aaplimg.com.
    apple-lr.g.aaplimg.com. 14400 IN NS a.gslb.aaplimg.com.
The Akamai CNAME just points to a series of aaplimg.com CNAME (eventually ending up with apple-lr.g.aaplimg.com), which is Apple's own CDN domain. The CDN's resolvers (a.gslb.aaplimg.com and b.gslb.aaplimg.com) refused to serve A records for apple-lr.g.aaplimg.com.

They fixed that and now it's back up.

This kind of setup is typically done for flexibility reasons (geographical DNS load balancing or similar, where the Akamai DNS servers serve as the geo LB).

> It's generally considered bad form to have the all the DNS servers for "example.com" under "example.com", by the way. If you mess up "example.com", or it goes down, getting to it to fix it can be difficult.

Not necessarily - this is what glue records[1] are for. Many large companies host their authoritative DNS on the same domain, it's not a bad practice when done carefully.

[1]: https://ns1.com/blog/glue-records-and-dedicated-dns

Re: Ask HN: Is Apple down?

#70

Post by mnd999 »

Animats wrote: post #52

nslookup > server a.ns.apple.com Default server: a.ns.apple.com Address: 2620:149:ae0::53#53 Default server: a.ns.apple.com Address: 17.253.200.1#53 > developer.apple.com Server: a.ns.apple.com Address: 2620:149:ae0::53#53 developer.apple.com canonical name = developer-cdn.apple.com.akadns.net. ** server can't find developer-cdn.apple.com.akadns.net: REFUSED Ah. So Apple's own DNS servers are redirecting developer.ap…

Can we refer to this as “Doing a Facebook?”
Post reply on HN