Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DDOS on Namecheap Free DNS and Default DNS V2

status.namecheap.com

Post reply on HN
Print view View original

71–80 of 119 posts

Re: DDOS on Namecheap Free DNS and Default DNS V2

#71

Post by nc-customer »

ilikesnowflakes wrote: post #36
jik wrote: post #22

Earlier quoted context omitted.

Just for future reference, it's usually considered a good idea to put your status page on completely independent infrastructure so that it stays up even when the rest of your stuff goes down. A status page that doesn't work during an outage isn't particularly useful.

If the hackers really want to take you down, adding another server in isn't very hard...

I suspect the hackers are targeting one of namecheap's customers, not namecheap directly. Because that's usually the case, a good approach is to not give all customers the exact same nameservers.

Re: DDOS on Namecheap Free DNS and Default DNS V2

#72

Post by [deleted] »

daigoba66 wrote: post #67
sparagi wrote: post #64

Earlier quoted context omitted.

If you use Route 53, your zone file is still at Namecheap (registrar). Doesn't that still make Namecheap a failure point?

No. The zone file lives on the nameserver (DNS server) which Route 53 provides. Namescheap registers a list of nameservers for your domain with the TLD. An over simplified example for looking up "news.ycombinator.com": 1. First query the TLD nameserver for all ".com" domains asking for the authoritative nameserver(s) for "ycombinator.com". 2. Next query that nameserver for "news.ycombinator.com".

[deleted]

Re: DDOS on Namecheap Free DNS and Default DNS V2

#74

Post by nc-customer »

ilikesnowflakes wrote: post #34
MuratC wrote: post #30

Earlier quoted context omitted.

You need to provide some gift to your customers for this downtime. I am using NC for 10 years, every time on bad issues I continue to use. But this outage very bad, I lost money...

DDOS attacks are not up to Namecheap. You want money, go talk to the people doing it. These are very hard to prevent.

They could better protect against it by not assigning the same list of DNS servers to every customer.

Re: DDOS on Namecheap Free DNS and Default DNS V2

#75

Post by wes-exp »

plasma wrote: post #43

How would one add (say) AWS Route53 as a secondary DNS? I assume you'd make sure the DNS records are the same in both DNS portals; and then add Route53 as 3rd & 4th nameservers with the first and second still being Namecheap?

It seems like secondary DNS is not supported, but you can change your primary DNS with the "Transfer DNS to Webhost" option.

Re: DDOS on Namecheap Free DNS and Default DNS V2

#76

Post by ted0 »

ted0 wrote: post #15

We are in the process of mitigating a large scale DDoS attack against our global DNS platform. We expect service to return to normal very shortly. Stay tuned and let me know if you have any questions. ted@namecheap.com

I'd also like to add that we have redunancy on our DNS V1. I advise switching over to this, in the meantime. Please find the tutorial here: https://www.namecheap.com/support/knowledgebase/article.aspx...

Re: DDOS on Namecheap Free DNS and Default DNS V2

#77

Post by Jailout2000 »

ted0 wrote: post #76
ted0 wrote: post #15

We are in the process of mitigating a large scale DDoS attack against our global DNS platform. We expect service to return to normal very shortly. Stay tuned and let me know if you have any questions. ted@namecheap.com

I'd also like to add that we have redunancy on our DNS V1. I advise switching over to this, in the meantime. Please find the tutorial here: https://www.namecheap.com/support/knowledgebase/article.aspx...

ETA how long it will take for the transfer to be completed? I know that editing host records usually is instantaneous (unlike other providers), but we're talking about changing the DNS servers here.

Re: DDOS on Namecheap Free DNS and Default DNS V2

#78

Post by Jailout2000 »

irontoby wrote: post #66
ted0 wrote: post #46

Earlier quoted context omitted.

Good point. The status page is on another cloud but since this is a DNS issue, the subdomain is down. In the future, we'll investigate running this page on a secondary DNS.

Posting up-to-the-minute updates on Twitter is also a good idea. Lots of tweets come back from a search for "Namecheap" & you want to be sure you're a part of that conversation!

They've been posting updates 30 minutes before your post buddy, and still are now. https://twitter.com/Namecheap

Re: DDOS on Namecheap Free DNS and Default DNS V2

#80

Post by ted0 »

irontoby wrote: post #66
ted0 wrote: post #46

Earlier quoted context omitted.

Good point. The status page is on another cloud but since this is a DNS issue, the subdomain is down. In the future, we'll investigate running this page on a secondary DNS.

Posting up-to-the-minute updates on Twitter is also a good idea. Lots of tweets come back from a search for "Namecheap" & you want to be sure you're a part of that conversation!

Yes, we are actively posting updates on Twitter.
Post reply on HN