DNSimple DDOS Attack
dnsimplestatus.com
DNSimple DDOS Attack
1–10 of 120 posts
Re: DNSimple DDOS Attack
#2We're kinda tied into DNSimple since we use an ALIAS record for our bare/naked/root domain. Amazon's Route53 supports aliases, but via a 301 redirect, which doesn't work in an SSL context (without browser warnings).
Nonetheless, we just spun up a Route53 zone, exported our zone from DNSimple, imported to Route53, and hand-migrated our ALIAS records to static A records in the new zone.
Not perfect or permanent, but we've gotten around the outage. Also, I just learned that pointhq has (seemingly-undocumented) support for ALIAS records in the same style as DNSimple, so this could be another avenue to explore.
Re: DNSimple DDOS Attack
#3We're kinda tied into DNSimple since we use an ALIAS record for our bare/naked/root domain. Amazon's Route53 supports aliases, but via a 301 redirect, which doesn't work in an SSL context (without browser warnings). Nonetheless, we just spun up a Route53 zone, exported our zone from DNSimple, imported to Route53, and hand-migrated our ALIAS records to static A records in the new zone. Not perfect or permanent, but we…
How are you exporting the zone with things as they are?
Re: DNSimple DDOS Attack
#4Can anyone expand on what this means: "This attack is volumetric in nature." (?)
Re: DNSimple DDOS Attack
#5We can watch this happen live @ http://map.ipviking.com/
Fascinating traffic floods from various locations, but the attack is not continuous.
Re: DNSimple DDOS Attack
#6We're kinda tied into DNSimple since we use an ALIAS record for our bare/naked/root domain. Amazon's Route53 supports aliases, but via a 301 redirect, which doesn't work in an SSL context (without browser warnings). Nonetheless, we just spun up a Route53 zone, exported our zone from DNSimple, imported to Route53, and hand-migrated our ALIAS records to static A records in the new zone. Not perfect or permanent, but we…
How are you exporting the zone with things as they are?
same question here - how did you do this while dnsimple.com is inaccessible?
Re: DNSimple DDOS Attack
#7We can watch this happen live @ http://map.ipviking.com/ Fascinating traffic floods from various locations, but the attack is not continuous.
Are these live attacks on any servers?
Re: DNSimple DDOS Attack
#8Can anyone expand on what this means: "This attack is volumetric in nature." (?)
Pretty sure it means the traffic is overwhelming them.
Re: DNSimple DDOS Attack
#9Can anyone expand on what this means: "This attack is volumetric in nature." (?)
According to http://www.arbornetworks.com/attack-ddos:
"DDoS attacks...will generally fall into one of three broad categories:
Volumetric Attacks: Attempt to consume the bandwidth either within the target network/service, or between the target network/service and the rest of the Internet. These attacks are simply about causing congestion."
Re: DNSimple DDOS Attack
#10[deleted]