Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DNSimple DDOS Attack

dnsimplestatus.com

Post reply on HN
Print view View original

81–90 of 120 posts

Re: DNSimple DDOS Attack

#81

Post by zuccs »

stevekemp wrote: post #75
dentarg wrote: post #60

Earlier quoted context omitted.

Not that I have any reliable info, but what I've heard, DNS Made Easy is a pretty stable and established DNS provider. They brag about "99.9999% uptime history" at http://www.dnsmadeeasy.com/technology/ . Though they doesn't seem as innovative and nice as DNSimple. Really hope things work out for DNSimple (really like the idea of their beta feature GitHub sync).

How does their beta-feature with github work? I can't find any obvious link and it seems frustratingly close to something I offer over at https://dns-api.com/ .. (I wrap Amazon's route53 with DNS entries read from github/gitbucket/similar.)

Can you use custom nameservers with your service?

Re: DNSimple DDOS Attack

#82

Post by robvolk »

zuccs wrote: post #78

I moved from Zerigo to DNSimple, and it's been awesome until now! What can you do to prevent this in future? Can you run multiple DNS providers simultaneously? So, ns1/ns2 go to DNSimple, and ns3/ns4 go to another provider?

Yes - that should work. I'm about to make that change to bring back our site. 2 on one name server, 2 on another.

Re: DNSimple DDOS Attack

#83

Post by webandtech »

Free solution that worked for me: Set up a free account on cloudflare.com, duplicate all dns records (thankfully I have a simple setup)... but next time I will keep a backup zone file!

FYI - Instead of an Alias record on DNSimple, CloudFlare will allow a CNAME record for the root domain using "CNAME flattening".

You can now set CloudFlare's DNS service to "bypass Cloudfare" on all records by clicking the icon so you don't get any of their magic (unless you want it).

Then add CloudFlare's 2 nameserves to your domain as your first 2 name servers. No need to remove dnsimple's name servers.

Now you have 2 DNS providers in case one fails, just make sure the records are the same across them both!

Re: DNSimple DDOS Attack

#84

Post by mctx »

aberoham wrote: post #21

If you have an active DNSimple web UI session (or API key) you can change your root nameservers by hitting their web tier directly at 50.31.213.210. We've successfully switched our domains over to nsone.net.

This worked for us - moved the DNS to Cloudflare, kept the domain at DNSimple

Re: DNSimple DDOS Attack

#85

Post by zuccs »

robvolk wrote: post #82
zuccs wrote: post #78

I moved from Zerigo to DNSimple, and it's been awesome until now! What can you do to prevent this in future? Can you run multiple DNS providers simultaneously? So, ns1/ns2 go to DNSimple, and ns3/ns4 go to another provider?

Yes - that should work. I'm about to make that change to bring back our site. 2 on one name server, 2 on another.

Cool. Do you need a provider that supports 'zone transfers'? Or is that only to keep things in sync automatically?

Re: DNSimple DDOS Attack

#86

Post by zuccs »

algiecas wrote: post #6
petercooper wrote: post #3

Earlier quoted context omitted.

How are you exporting the zone with things as they are?

same question here - how did you do this while dnsimple.com is inaccessible?

You can force your hosts file locally. Set "dnsimple.com" to "50.31.213.210". On Mac use "sudo pico /etc/hosts" and follow the formatting of the other entries.

Re: DNSimple DDOS Attack

#87

Post by kyletns »

webandtech wrote: post #83

Free solution that worked for me: Set up a free account on cloudflare.com, duplicate all dns records (thankfully I have a simple setup)... but next time I will keep a backup zone file! FYI - Instead of an Alias record on DNSimple, CloudFlare will allow a CNAME record for the root domain using "CNAME flattening". You can now set CloudFlare's DNS service to "bypass Cloudfare" on all records by clicking the icon so you…

Hey thanks for the post, but how do I add CloudFlare's nameservers? DNSimple won't let me add NS records on the root domain: "You may only delegate subdomains". So in theory, I can fix the www subdomain, but my naked redirect to www won't happen if DNSimple is still down.

Any ideas?

Re: DNSimple DDOS Attack

#88

Post by feld »

chrisbolt wrote: post #65
dedene wrote: post #39

"30 minute ETA from our network provider to begin scrubbing traffic in a location with capacity." https://twitter.com/dnsimplestatus/status/539551209452232705

It's surprising that they're appear to not be multihomed... http://bgp.he.net/AS32771 Unlike Dyn or CloudFlare: http://bgp.he.net/AS33517 http://bgp.he.net/AS13335

They're in ServerCentral's datacenter and ServerCentral is very much multi homed. They wouldn't gain anything by doing native BGP to all these peers in the exact same datacenter when SC's backbone will handle this stuff for them.

Re: DNSimple DDOS Attack

#89

Post by zuccs »

stevekemp wrote: post #75
dentarg wrote: post #60

Earlier quoted context omitted.

Not that I have any reliable info, but what I've heard, DNS Made Easy is a pretty stable and established DNS provider. They brag about "99.9999% uptime history" at http://www.dnsmadeeasy.com/technology/ . Though they doesn't seem as innovative and nice as DNSimple. Really hope things work out for DNSimple (really like the idea of their beta feature GitHub sync).

How does their beta-feature with github work? I can't find any obvious link and it seems frustratingly close to something I offer over at https://dns-api.com/ .. (I wrap Amazon's route53 with DNS entries read from github/gitbucket/similar.)

And link to their Git support is here: http://support.dnsimple.com/articles/github-sync/ (if only DNS wasn't down..)

Re: DNSimple DDOS Attack

#90

Post by webandtech »

kyletns wrote: post #87
webandtech wrote: post #83

Free solution that worked for me: Set up a free account on cloudflare.com, duplicate all dns records (thankfully I have a simple setup)... but next time I will keep a backup zone file! FYI - Instead of an Alias record on DNSimple, CloudFlare will allow a CNAME record for the root domain using "CNAME flattening". You can now set CloudFlare's DNS service to "bypass Cloudfare" on all records by clicking the icon so you…

Hey thanks for the post, but how do I add CloudFlare's nameservers? DNSimple won't let me add NS records on the root domain: "You may only delegate subdomains". So in theory, I can fix the www subdomain, but my naked redirect to www won't happen if DNSimple is still down. Any ideas?

You would set your name servers with your registrar, such as godaddy. If dnsimple is your registrar as well as your DNS provider you may be out of luck until they come back online. The help page is here though: http://support.dnsimple.com/articles/setting-name-servers/
Post reply on HN