Live data from Hacker News

DNSimple DDOS Attack

dnsimplestatus.com

101–110 of 120 posts

Re: DNSimple DDOS Attack

#102
DNSimple is my registrar and (was my only) DNS provider. Now that they're back up I've exported the zone file and imported it to route 53 for redundancy in case this happens again. I also I updated the name servers in DNSimple to be 2 route 53, and 2 DNSimple, in that order. Is that the right way to do it? Does the order of the NS records matter? I set them up so that they're in the same order in both places.

Re: DNSimple DDOS Attack

#103
post #85

Earlier quoted context omitted.

Cool. Do you need a provider that supports 'zone transfers'? Or is that only to keep things in sync automatically ?

> Do you need a provider that supports 'zone transfers'? No. > Or is that only to keep things in sync automatically? Yes.

Do you know of any providers that will work nicely/automatically with DNSimple?

Re: DNSimple DDOS Attack

#104
post #81

Earlier quoted context omitted.

How does their beta-feature with github work? I can't find any obvious link and it seems frustratingly close to something I offer over at https://dns-api.com/ .. (I wrap Amazon's route53 with DNS entries read from github/gitbucket/similar.)

Can you use custom nameservers with your service?

When you upload a new zone it will be assigned a set of nameservers - four. You can't choose what they are in advance, and you can't specify the TLDs. So you might end up with "ns-1933.awsdns-49.co.uk.", "ns-1109.awsdns-10.org.", or similar.

Does that answer the question? I'm a little hazy on what you're actually asking.

Re: DNSimple DDOS Attack

#105
post #89

Earlier quoted context omitted.

How does their beta-feature with github work? I can't find any obvious link and it seems frustratingly close to something I offer over at https://dns-api.com/ .. (I wrap Amazon's route53 with DNS entries read from github/gitbucket/similar.)

And link to their Git support is here: http://support.dnsimple.com/articles/github-sync/ (if only DNS wasn't down..)

Interesting thanks.

An interesting/custom choice to use JSON, and real github integration rather than using hooks as I did.

Re: DNSimple DDOS Attack

#106
post #103

Earlier quoted context omitted.

> Do you need a provider that supports 'zone transfers'? No. > Or is that only to keep things in sync automatically? Yes.

Do you know of any providers that will work nicely/automatically with DNSimple?

I don't unfortunately.

Re: DNSimple DDOS Attack

#107
post #85

Earlier quoted context omitted.

Cool. Do you need a provider that supports 'zone transfers'? Or is that only to keep things in sync automatically ?

> Do you need a provider that supports 'zone transfers'? No. > Or is that only to keep things in sync automatically? Yes.

DNSimple does not currently support zone transfers (see http://support.dnsimple.com/articles/master-slave-support/), but you should write an e-mail to the support (address is on the linked page) requesting it :) With dozens of domains, managing multiple DNS servers is a pain. Zone transfers make this very easy.

Re: DNSimple DDOS Attack

#108

For those wondering about alternatives to ALIAS: if you use a www subdomain, then you can simply use CNAMEs. (Though the appearance is a matter of taste...) Google, Facebook, etc, all use this approach.

Yes, but if someone visits your apex domain directly, you want to redirect him/her to the www version... And if you use cloud based hosting where the IP can change quite often, that's a pain to maintain manually.

Re: DNSimple DDOS Attack

#109
post #81

Earlier quoted context omitted.

How does their beta-feature with github work? I can't find any obvious link and it seems frustratingly close to something I offer over at https://dns-api.com/ .. (I wrap Amazon's route53 with DNS entries read from github/gitbucket/similar.)

Can you use custom nameservers with your service?

AWS Route 53 has added vanity DNS in the last few weeks, so you can make your DNS servers appear to be ns0.yourdomain.com rather than ns153.awsdomain.com (or whatever)

However, making your DNS servers to be responsible for serving their own DNS is a bit of an extra complexity and risk that no customer will ever care about..

Re: DNSimple DDOS Attack

#110
post #16

Earlier quoted context omitted.

A few people do ALIAS style records, DNSMadeEasy and EasyDNS do "ANAME" records which are pretty much the same.

Will these services not have the same thin pipe issue that's currently affecting DNSimple?

It's unlikely, DNSimple appear to have relied on a single network provider and a limited number of name servers.

If I do a traceroute to the 5 DNSMadeEasy name server records (they actually run many more hosts) I go via 3 different networks - GTT, NTT, and Tata.

Post reply on HN