Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare silently deleted my DNS records

txti.es

Post reply on HN
Print view View original

411–420 of 433 posts

Re: Cloudflare silently deleted my DNS records

#411

Post by techslave »

Mojah wrote: post #189

Occasions are rare where I get to say "hey, I built a thing that might help here!" - so forgive me as I take this opportunity with both hands. Whether this was a bug or a rare protective mechanisme, there will be times when your DNS provider makes a mistake and removes records. You mentioned in your post your DNS isn't hard to reproduce, but how certain are you that _all_ records are restored? How long do you have to…

DNS Spy costs money? wow the art of sysadmin really is dead. having this kind of tight control of DNS used to be a given.

Re: Cloudflare silently deleted my DNS records

#412

Post by techslave »

owenmarshall wrote: post #76
RcouF1uZ4gsC wrote: post #24

Be wary of being part of something that is a cost center for the company instead of a profit center. CloudFlare is selling domains at cost. That means they are not making any money from being a domain registrar, which means they will do everything to keep the cost of doing it as low possible to themselves. This means lack of customer service and use of ML dragnets for "anomalous" behavior.

.com has a price floor of $7.85. Most registrars seem to target anywhere from the $9.99 - $14.99 range for registration because, as far as I can tell, there is no real differentiation outside of price. Sure, I could spend $lots to get a dedicated account rep from MarkMonitor or CSC but that's not really feasible for my personal site. Are there really any registrars that hit a reasonable price point for individuals an…

> .com has a price floor of $7.85.

Not true. CF claims it is $8.03. Let’s say it’s $7.85 + .18 tax or something.

You don’t deal with the registry. You deal with a registrar. Just as they can charge a markup, they can give a discount.

Registration could be free. It would mean a loss of $7.85/$8.03 per year. Maybe they make it up by selling ads on your domain. Maybe they use it as a loss leader service.

There is no floor.

Even CF’s at cost pricing loses them money. It’s not free to maintain the services.

Re: Cloudflare silently deleted my DNS records

#413

Post by superkuh »

ryanlol wrote: post #110
superkuh wrote: post #87

Earlier quoted context omitted.

It's very easy to manage incoming bandwidth when you're hosting a tor onion service. The entire Tor ecosystem kind of helps to since there's a limit on the instantaneous amount of data in any circuit. Overall tor is great because I own my domain name (rather than leasing it on the whim of some corp) and it has nice DoS and bandwidth tools built in. And if you were using cloudflare before you should be okay with some…

> It's very easy to manage incoming bandwidth when you're hosting a tor onion service. Yeaah, I don’t think anyone who’s operated a larger onion service would agree with you.

Well, I've been operating a bunch of small ones from a home connection. So my bandwidth issues might be of less scale but certainly more acute. One simple line of Tor config allows me to limit my total bandwidth and avoid saturating my home connection due to people hitting the onion services.

I've had one that's been under a DoS for about a month now and things are going well regardless. Differentiating "real" from "bad" traffic is super hard and almost infeasible, I get what you're saying about that. But in terms of not getting knocked offline Tor is easy and really nice.

Re: Cloudflare silently deleted my DNS records

#414

Post by tikiman163 »

Joakal wrote: post #294
foota wrote: post #275

Earlier quoted context omitted.

Because requiring the customer to pay a cost fixes the incentives problem. A customer may have an issue that is a minor inconvenience to them, that can either stay as not resolved, is due to error, or is simply not worth resolving to them. By having them pay for fixing the issue it could greatly reduce the number of inbound cases, allowing them to go straight to people that can act on them instead of sitting in triag…

In terms of games theory; if there's no cost to the company to ignore the customer, then that's an incentive to ignore the consumer's complaint. Especially if that company has a monopoly. I can understand why GP suggested company pays $20.

The suggestion is the customer pays $20 so they don't try and go straight to the ombudsman with ever little issue. The company doesn't and shouldn't pay the customer under any circumstance.

In technical support, one of the largest problems you have to deal with is all of the idiots that don't know how to use the product and won't look up the documentation or learn the product on their own. These people spam the shit out of support all day for the most basic shit. Seriously, I was working support at an anti-virus company and 85% of the calls into the paid business tier support were requests for us to do installs or basic application configuration for them. I know that not everybody knows how to configure a firewall, but "where do I download the install file for x" is literally Google-able.

The idea of an ombudsman is ultimately a bad one in this case because the problem isn't with the product or the support or the documentation. The problem is people Always think their issue is special and the most capable person should help them. Our support tier was paid, so more often than not we did what they asked, but the free customers would just get routed to a sales rep because free customers are even dumber and more entitled than the paying ones.

This whole situation is farcicle to me. Yet another free customer blew a minor issue out of proportion and had to apologize when it turned out the system hadn't failed him, he was just a free loading mooch all along.

Re: Cloudflare silently deleted my DNS records

#415

Post by ryanlol »

superkuh wrote: post #413
ryanlol wrote: post #110

Earlier quoted context omitted.

> It's very easy to manage incoming bandwidth when you're hosting a tor onion service. Yeaah, I don’t think anyone who’s operated a larger onion service would agree with you.

Well, I've been operating a bunch of small ones from a home connection. So my bandwidth issues might be of less scale but certainly more acute. One simple line of Tor config allows me to limit my total bandwidth and avoid saturating my home connection due to people hitting the onion services. I've had one that's been under a DoS for about a month now and things are going well regardless. Differentiating "real" from "…

> But in terms of not getting knocked offline Tor is easy and really nice.

That’s of course only until someone who isn’t utterly incompetent tries to DoS you and you realize that you’ll need to spin up hundreds and hundreds of tor daemons (with cpu cores to match!) to tank it.

Onionbalance isn’t built in, and hardly solves attacks. There are no DDoS protection services, so you’re left scrambling to build your own infra against impossible odds.

None of the big onionland sites manage decent uptimes.

Re: Cloudflare silently deleted my DNS records

#416

Post by mc3 »

jiggawatts wrote: post #387
mc3 wrote: post #298

Earlier quoted context omitted.

Why can you delete DNS records? Well it's pretty common to want to do so (usually followed by adding some new ones). Your doctor has a syringe as a medical instrument. They can kill if not used correctly.

This is not the user manually deleting records. This is the doctor seeing a patient that hasn't moved in a few hours and executing them: https://community.cloudflare.com/t/does-cloudflare-automatic... Oh wait, he was just sleeping? Ah, well... "oops". There is exactly one reason you'd delete customer data without their active involvement: They're overdue on their bill and have ignored all warnings and communications.…

Ugh! I may have interpreted the comment I responded to wrong, and replied to my own strawman. I think you need the power for the user to delete records (obviously) but this could mean a bug in the system could cause the records to be deleted. But it sounds from what you are saying that they sort of "intentionally" deleted the records (not sure if a human had the intent or an algorithm?) but if intentionally deleted yes that sucks, there is no reason for that I can think of, given what they do is about handling DDOS.

Unless the mechanism exists for legal reasons, i.e. they are forced to take some sites down by the government or law suits.

Re: Cloudflare silently deleted my DNS records

#417

Post by mavhc »

rabite wrote: post #121
mavhc wrote: post #61

Earlier quoted context omitted.

Is it censorship if they refuse their money for a service? Pretty sure that's just business. Are they stopping you having a website?

Yes, it is censorship. The entire history of First Amendment jurisprudence was set around the idea that powerful people were not allowed to stop political and religious speech. Marsh v. Alabama is a great example: a company town owned sidewalks that they didn't want religious prosyletizers on. The courts ruled that the fact that they owned the sidewalks and roads is irrelevant. For the entire history of my country po…

How is it censorship?, they're not stopping you publishing anything, they're just not helping you do it.

Re: Cloudflare silently deleted my DNS records

#418

Post by mavhc »

wyoh wrote: post #225
mavhc wrote: post #61

Earlier quoted context omitted.

Is it censorship if they refuse their money for a service? Pretty sure that's just business. Are they stopping you having a website?

Would you be OK with your phone provider or imternet provider to stop doing business with because you said some unsavory thing to a friend or have blog supporting the wrong candidate?

Yes, because there's always another option.

I'd switch to an ISP that promised they'd take no money from Nazis

Re: Cloudflare silently deleted my DNS records

#419

Post by PovilasID »

Had the same or very similar issue . My domain registrar dropped all name server settings on an 'update'/whois update requirmet change Luckily I had an old export of DNS records so most were there but not all the settings were retained like DNS only or full proxy. Those were not mission critical, so not that bad but I bet some emails went to the void because there was no real warning from both my domain registration service provider and cf so I found it very 'upsetting' (I was pissed on them both)

Re: Cloudflare silently deleted my DNS records

#420

Post by dependenttypes »

lexicality wrote: post #408
dependenttypes wrote: post #248

Earlier quoted context omitted.

> and pedophiles Is that a reference to 8chan? Because if so I am pretty sure that they removed controversial boards of this form a few years back - long before cloudflare banned them.

I had heard that they were still at it? But if not - that's good

> I had heard that they were still at it?

You heard wrong.

> But if not - that's good

Censoring people for their attractions/fetishes/sexual orientation is never good - it is bigoted.

Post reply on HN