Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Massive Dyn DNS outage

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 302 posts

Re: Massive Dyn DNS outage

#41

Post by 6d6b73 »

drinchev wrote: post #35
6d6b73 wrote: post #34

Earlier quoted context omitted.

change your name server at your registrar to something else, add all necessary entries in the new DNS and be up before DDoS is stopped.

Sadly we're too interconnected. Every company that relies on that DNS should do what you suggest, but the control is definitely not in our ( users ) hands.

Yeah, users are screwed. Unless they have a little more experience with how unreliable cloud can be, and they made a local copy of everything* their work depends on, just in case.

*Everything that can be local.

Re: Massive Dyn DNS outage

#48

Post by 6d6b73 »

ljosa wrote: post #37
6d6b73 wrote: post #32

All this talk about redundancy, real-time apps, scalable architecture and and a "simple" DDOS against DNS architecture brings half of the internet down. Honestly did nobody think about having a spare dns at some other company? or even backup dns server exactly for a situation like that?

The TTL for the glue records of a .com domain is 48 hours, so even if you have Route53 set up and ready to go, it takes a long time to switch the zone away from Dyn. We switched from Dyn to Rout53 a few weeks ago. It took about 12 hours before half of the traffic had shifted over.

That's the reason to have your DNS at at least two different companies, working in tandem. In a case where one is down, your Unicorn Corp doesn't go down with it.

Re: Massive Dyn DNS outage

#49

Post by calgoo »

All sites look good for me in Europe using 8.8.8.8.

Edit: It actually looks like most of the sites are loading faster then normal.

Edit2: I have cleared the cache's on my machine and router. Still works.

Post reply on HN