Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

webcache.googleusercontent.com

Post reply on HN
Print view View original

211–220 of 253 posts

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#211

Post by xxdesmus »

gsich wrote: post #186
xxdesmus wrote: post #162

Earlier quoted context omitted.

Indeed, our security service allows our customer (the website owner) the option to adequately protect their website. I'm not sure you actually made a point other than to confirm that we allow website owners to fully whitelist Tor if they'd like to.

opt-in vs. opt-out

Not sure your point. Who exactly do you anticipate is opt-ing?

The website owner's settings defaults to secure, and they can intentionally take action to make the website less secure if they'd like to. That is their decision, of course we do not default to a less secure posture.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#214

Post by stryk »

freehunter wrote: post #201
LeoPanthera wrote: post #194

Earlier quoted context omitted.

Fuck I hate this. I've avoided buying storage servers from ixsystems, despite the fact their products seem to be exactly what we need, because they won't tell me how much they fucking cost. They want to have a "conversation" about "solutions". Fuck you. Sell me boxes and tell me how much they cost. But they won't.

I work for a vendor and I'm not allowed to tell my clients pricing because I'm not qualified to make deals. We don't even have a list price published internally, it's all at the salesman's discretion. That means some clients pay $150k, some pay $300k, some get it for free bundled with another purchase. Far too often I'm asked "budgetary pricing" but even that is a conversation with a solution architect and a virtual…

Ugh. So many terms that when I actually say out loud and try to be serious I throw up in the back of my mouth a little.

Is there room in this space for a new no-nonsense vendor? Someone who cuts out all the goddamn middlemen and just asks what hardware you want, how you want it configured, and quotes you a frickin price without all the bullshit?

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#215

Post by gbraad »

amq wrote: post #12

The concerning thing about this is that internet is increasingly dependent on Cloudflare, making it a single point of failure and exploitation. Somehow, people are not talking much about it, but a significant amount of sites have opted in for Cloudflare proxying, allowing it to see the traffic in plain text, while the visitors are made to believe that the connection is secure. Similarly, users will now use their fast…

> single point of failure

Let me spell that: A W S

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#216

Post by thisacctforreal »

gruez wrote: post #95
cm2187 wrote: post #64

Earlier quoted context omitted.

For servers you typically have no DHCP. Also ISP often have annoying behaviours like redirecting you to their own websites for failed lookups. And my ISP doesn’t allow local non routable IPs (192.168.1.x) in DNS responses while google does.

>And my ISP doesn’t allow local non routable IPs (192.168.1.x) in DNS responses isn't that the recommended behavior? otherwise you can do a bunch nasty stuff like rebinding attacks. https://www.ietf.org/proceedings/52/I-D/draft-ietf-dnsop-don...

It's necessary for adding SSL to an intranet service.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#217

Post by gbraad »

gbraad wrote: post #215
amq wrote: post #12

The concerning thing about this is that internet is increasingly dependent on Cloudflare, making it a single point of failure and exploitation. Somehow, people are not talking much about it, but a significant amount of sites have opted in for Cloudflare proxying, allowing it to see the traffic in plain text, while the visitors are made to believe that the connection is secure. Similarly, users will now use their fast…

> single point of failure Let me spell that: A W S

Relying on a service does not always result in a SPOF. The time CloudFlare was unavailable (globally or for very noticable impact) can be counted on one hand for me... While AWS outages already need me to resort to hands and feet.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#218

Post by stock_toaster »

stryk wrote: post #214
freehunter wrote: post #201

Earlier quoted context omitted.

I work for a vendor and I'm not allowed to tell my clients pricing because I'm not qualified to make deals. We don't even have a list price published internally, it's all at the salesman's discretion. That means some clients pay $150k, some pay $300k, some get it for free bundled with another purchase. Far too often I'm asked "budgetary pricing" but even that is a conversation with a solution architect and a virtual…

Ugh. So many terms that when I actually say out loud and try to be serious I throw up in the back of my mouth a little. Is there room in this space for a new no-nonsense vendor? Someone who cuts out all the goddamn middlemen and just asks what hardware you want, how you want it configured, and quotes you a frickin price without all the bullshit?

abmx maybe?

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#219

Post by remir »

manacit wrote: post #35
cm2187 wrote: post #33

Earlier quoted context omitted.

To me that’s a diversification away from 8.8.8.8. I am absolutely not criticising google’s DNS, it’s a useful service. But I am happy to get more choice.

I agree - there are not very many internet-scale (for lack of a better term), completely free and fast DNS servers who have an IP address that's easy to remember. Is that specific? sure, but I'll tell you when I go to set a new system up I'm going to type 8.8.8.8 because it's what comes to my mind.

Well, there's 9.9.9.9 (Quad9.net) which is global and secure, too.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#220

Post by stryk »

stock_toaster wrote: post #218
stryk wrote: post #214

Earlier quoted context omitted.

Ugh. So many terms that when I actually say out loud and try to be serious I throw up in the back of my mouth a little. Is there room in this space for a new no-nonsense vendor? Someone who cuts out all the goddamn middlemen and just asks what hardware you want, how you want it configured, and quotes you a frickin price without all the bullshit?

abmx maybe?

First I've heard of them (but I'm not any kind of expert). Are they good? I usually just hear the usual suspects mentioned such as iXSystems and Supermicro. Linux guys will mention one called PogoLinux every once in a while also
Post reply on HN