Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare silently deleted my DNS records

txti.es

Post reply on HN
Print view View original

181–190 of 433 posts

Re: Cloudflare silently deleted my DNS records

#181

Post by cmcd »

johnklos wrote: post #101
pmlnr wrote: post #95

Earlier quoted context omitted.

Digitalocean has free dns service with an api; it's good and reliable. Running my own dns looks more and more reasonable though.

Perhaps, but Digital Ocean also host spammers / scammers and doesn't do anything about them when they're reported.

I am sure AWS, OCI, GCP, etc. all host scam websites with varying degrees of removal efficiency. What cases are you referring to specifically? Did they state they were not going to take these sites down or what was the context that you object to?

Re: Cloudflare silently deleted my DNS records

#182

Post by stevekemp »

djsumdog wrote: post #48
isclever wrote: post #40

My takeaway: 1. Setup up monitoring on your critical domains. UptimeRobot and Hetrixtools are good starters with generous free tier. You should know when your website/email/dns isn't working. 2. Don't tie your domain registration with your DNS provider. You lose everything if something goes wrong with your account. 3. Be able to jump ship easily, have backups of your zone, already know where you will transfer to.

> UptimeRobot and Hetrixtools are good starters with generous free tier Are there any open source status pages/monitor programs that have build-in checks for HTTPS, DNS records (ipv4/6), arbitrary port checks, etc? I'd rather just setup a status page/alert app on a $5 minimal DO/Vultr node and self-host/support/contribute to a FOSS program than use a commercial provider.

I wrote a scalable system for this:

https://github.com/skx/overseer/

Handles SSL-checks, DNS-checks, SMTP-checks, & etc. Runs a thousand-checks every two minutes for me, give or take. Pluggable output via a redis-queue.

Re: Cloudflare silently deleted my DNS records

#183

Post by gjs278 »

Swizec wrote: post #154
andrewstuart wrote: post #142

Earlier quoted context omitted.

My point is precisely that to me, "jgc" IS a random person. How the heck do I know who this person is. It shouldn't matter, and it should not be required, that someone "known and important" within an organisation decides to start doing hands on tech support in social media following a PR disaster. If "jgc" is actually someone important within this company then maybe after fixing this issue, they can then go fiox thei…

It’s the CTO according to their HN profile ;)

stop winking you fucking weirdo

Re: Cloudflare silently deleted my DNS records

#184

Post by Defenestresque »

throwawaydns101 wrote: post #10

DNS has become frighteningly unreliable. Here are previous stories that show how it is possible to lose access to your domain for no fault of yours: (1) https://news.ycombinator.com/item?id=21700139 - Sinkholed (2) https://news.ycombinator.com/item?id=19322966 - I lost my domain and everything that goes with it No different than this story where the author's DNS records were deleted because of so called "anomaly". He…

>DNS has become frighteningly unreliable. Here are previous stories that show how it is possible to lose access to your domain for no fault of yours:

The second story you posted is about a user who forgot to renew their domain and did not wish to pay the overly-inflated fee to re-register it while it was in the grace period.

I hold no love for any registrar that jacks up rates for getting back an expired domain and agree that they should have sent a reminder email, but describing this as someone "losing their domain through no fault of their own" is, frankly, incredibly misleading.

The user:

1) forgot to renew their domain 2) had full right to recover their domain but objected to the price 3) had full right to transfer the domain out to another registrar for the original 15EUR price and 4) eventually got back full control of the domain

Re: Cloudflare silently deleted my DNS records

#185

Post by martin1975 »

jgrahamc wrote: post #83

This is being looked into internally and I am involved. Likely won’t post an update here as it pertains to a customer account (unless customer agrees). BTW If you, dear reader, ever find yourself so frustrated with Cloudflare that you feel like your only recourse is a blog post... my email is jgc@cloudflare.com and I’m happy to hear from people.

You guys are the worst censors even on your own blog. Any criticism toward your CEO or the way things have been done, completely out of integrity with your own policies in the past (such as cutting out providers because your CEO woke up self-righteous on the wrong foot that day) gets moderated away or not even admitted to the CF blog.

You've screwed up so many times, I am surprised by now more people aren't onto your tired antics. Thankfully, you cannot delete this post - perhaps many fanboys will downgrade it, but at least I can tell you how I feel.

Re: Cloudflare silently deleted my DNS records

#186

Post by inetknght »

stakecounter wrote: post #169
gist wrote: post #134

Earlier quoted context omitted.

> BTW If you, dear reader, ever find yourself so frustrated with Cloudflare that you feel like your only recourse is a blog post... my email is jgc@cloudflare.com and I’m happy to hear from people. I know that people will think it's great that you are doing this and I also know that you think it's good (for you) to have a feel for the issues that frustrate every day users. But I think it's not a great use of a compan…

> I know that people will think it's great that you are doing this and I also know that you think it's good (for you) to have a feel for the issues that frustrate every day users. But I think it's not a great use of a company execs time and I am not even sure it's a good way to deploy resources at Cloudflare. As a counter example, Jeff Bezos (whose time may be worth more than anybody else's) famously audits his email…

> As a counter example, Jeff Bezos (whose time may be worth more than anybody else's) famously audits his email for customer complaints and occasionally derails an organization for a day or two in order to figure out what happened.

Is that why Amazon is growing more and more notorious for selling fraudulent items over the years?

Re: Cloudflare silently deleted my DNS records

#187

Post by jcrites »

daenz wrote: post #6

This happened to me with AWS somewhat recently[0], and I never found out exactly what happened. I just chalk it up to some dev made a mistake and didn't tell anyone. It's pretty alarming when things like this happen though. 0. https://news.ycombinator.com/item?id=21326014

I've been involved in using Route 53 to manage thousands of DNS zones, and haven't come across something like that. I'd recommend putting in a support request via the account that was affected to ensure that it gets looked at.

If you haven't already, you might consider checking the CloudTrail logs for the account in question to see if there were any API commands related to the zone.

Re: Cloudflare silently deleted my DNS records

#188

Post by bithaze »

iudqnolq wrote: post #137
graiz wrote: post #126

Earlier quoted context omitted.

Maybe contact support first, figure out what happened and why before writing the blog post? Maybe it's a cloudflare issue, maybe it's an honest mistake, maybe they are bad at customer service... either way, it's not great to shame a company before you even open a support ticket or talk to someone to find out.

I address this in TFA. Essentially I felt that this was alright because when I filed a ticket I was informed that I should expect a long wait and that they recommend that their non-business customers post publicly on their support forum for crowdsourced support because that leads to faster replies. I was unable to log into that forum, and I suspect that may be because the way they set up SSO between the forum login a…

Oh, the horror of recommending a public forum. (/s, of course.)

A fair number of questions aren't unique - product questions, how to use an API, etc. Someone may have asked a similar question, in which case you'll find an answer, find it faster than it'll take to hear back from the support team, and it deflects an unnecessary (already answered) ticket. That should be a win all around.

Now if you do have a novel question or something account-specific, by all means, open a ticket. There you'll get replies from people who can look up your account and give you specific answers.

The ombudsman tip in this post doesn't make a whole lot of sense when the normal support process wasn't really given a chance before making the blog post.

Re: Cloudflare silently deleted my DNS records

#189

Post by Mojah »

Occasions are rare where I get to say "hey, I built a thing that might help here!" - so forgive me as I take this opportunity with both hands.

Whether this was a bug or a rare protective mechanisme, there will be times when your DNS provider makes a mistake and removes records. You mentioned in your post your DNS isn't hard to reproduce, but how certain are you that _all_ records are restored? How long do you have to fight DNS issues before it's OK?

I built DNS Spy [1] for this exact occasion. It monitors your DNS for any changes made, keeps a version of all DNS records (current & former) and allows you to restore/download a BIND9 zone file for your zone. You can easily import this into any commercial DNS provider or in your own BIND9/PowerDNS setup.

I would love to hear feedback on how DNS Spy could be improved when DNS disasters like these occur!

[1] https://dnsspy.io/

Post reply on HN