Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare silently deleted my DNS records

txti.es

Post reply on HN
Print view View original

11–20 of 433 posts

Re: Cloudflare silently deleted my DNS records

#11

Post by thedanbob »

fernandotakai wrote: post #5

as much as i like cloudflare (and i like them a lot), it's kind of absurd that this kind of thing can happen. a lot of red flags that, if true, would mean that their infrastructure require a lot more care (127.0.0.1 as the source of an audit event? no email when DNS records are deleted? no 1-to-1 message due to this happening?).

I had an issue with them recently where a SRV record pointing to “.” (meaning “service unavailable”) was being rewritten to the string “false”. It didn’t take them too long to fix it, but it made me wonder how they managed to push a bug like that to production without some sort of automated test catching it.

Re: Cloudflare silently deleted my DNS records

#12

Post by ocdtrekkie »

thedanbob wrote: post #11
fernandotakai wrote: post #5

as much as i like cloudflare (and i like them a lot), it's kind of absurd that this kind of thing can happen. a lot of red flags that, if true, would mean that their infrastructure require a lot more care (127.0.0.1 as the source of an audit event? no email when DNS records are deleted? no 1-to-1 message due to this happening?).

I had an issue with them recently where a SRV record pointing to “.” (meaning “service unavailable”) was being rewritten to the string “false”. It didn’t take them too long to fix it, but it made me wonder how they managed to push a bug like that to production without some sort of automated test catching it.

IIRC, if you're on a free plan you get exposed to code changes a little faster than their paying customers.

Re: Cloudflare silently deleted my DNS records

#13

Post by therealmarv »

Also don't forget: Cloudflare breaks many second and third world countries' Internet with their DNS captchas because they think the good guys live only in first world countries (maybe look up the word discrimination in your dictionary cloudflare) and force them to install extensions like PrivacyPass because they think "we are so big and know what is right for the world".

Re: Cloudflare silently deleted my DNS records

#14

Post by Operyl »

ocdtrekkie wrote: post #12
thedanbob wrote: post #11

Earlier quoted context omitted.

I had an issue with them recently where a SRV record pointing to “.” (meaning “service unavailable”) was being rewritten to the string “false”. It didn’t take them too long to fix it, but it made me wonder how they managed to push a bug like that to production without some sort of automated test catching it.

IIRC, if you're on a free plan you get exposed to code changes a little faster than their paying customers.

Correct, if I recall correctly they outlined this in their SEC filings.

Re: Cloudflare silently deleted my DNS records

#16

Post by johnklos »

Is it really all that surprising when a big company that claims to be good but hosts phishing content in the name of free speech does whatever they want, including breaking things and not explaining why?

I don't trust Cloudflare one bit, and I think everyone should question whether their attempt to re-centralize everything is beneficial to the planet.

There are two major problems here: one, the problem itself, which is the deletion of DNS for apparently no good reason, and two, which is the bigger problem, is that it's incredibly difficult to talk to a human about what happened, so there's no assurance it won't happen again.

If people want things to be reliable, we've got to stop using companies with which we cannot communicate.

Re: Cloudflare silently deleted my DNS records

#17

Post by djsumdog »

I really had a strong dislike for Cloudflare after they banned certain customers for political reasons[1]. The CEO mentioned how maybe it wasn't the right thing to do .. and then they did it again.

There aren't really any self-hosted solutions for DDoS protection like Cloudflare since it requires things happening in the network layer. Implementing a solution would require access to monitor and reshape the local network, but I'm glad to see companies like Linode and DO offering DDos package.

I want to start running my own DNS-over-HTTPS server as well, so I can pump firefox DNS requests to a self-hosted solution and not to Google or Cloudflare. I really don't trust them and am having trouble understanding why so many other people do.

[1]: https://battlepenguin.com/politics/the-new-era-of-corporate-...

Re: Cloudflare silently deleted my DNS records

#18

Post by nathancahill »

throwawaydns101 wrote: post #10

DNS has become frighteningly unreliable. Here are previous stories that show how it is possible to lose access to your domain for no fault of yours: (1) https://news.ycombinator.com/item?id=21700139 - Sinkholed (2) https://news.ycombinator.com/item?id=19322966 - I lost my domain and everything that goes with it No different than this story where the author's DNS records were deleted because of so called "anomaly". He…

Odd comment to make a throwaway for, not very controversial (unless you work for Cloudflare?)

Re: Cloudflare silently deleted my DNS records

#19

Post by djsumdog »

johnklos wrote: post #16

Is it really all that surprising when a big company that claims to be good but hosts phishing content in the name of free speech does whatever they want, including breaking things and not explaining why? I don't trust Cloudflare one bit, and I think everyone should question whether their attempt to re-centralize everything is beneficial to the planet. There are two major problems here: one, the problem itself, which…

Does OP have a free account with just DDOS protection. Does a paid account still have the notice to ask in the community forums first?
Post reply on HN