Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Akamai Edge DNS was down

edgedns.status.akamai.com

Post reply on HN
Print view View original

171–180 of 229 posts

Re: Akamai Edge DNS was down

#171

Post by jacob019 »

mandelbrotwurst wrote: post #137
mcintyre1994 wrote: post #35

Earlier quoted context omitted.

It's interesting that they report an AWS outage but there don't seem to be any issues there. Looks like their methodology is a bit too reliant on those speculative tweets from the first 5 minutes of all these sites going down. https://downdetector.com/status/aws-amazon-web-services/ > So many websites are down, are AWS servers down or something? > Amazon web services is down which is affecting a lot of company web si…

It’s just based on user reports, so this is people mischaracterizing it as an AWS outage.

cloudfront was down too

Re: Akamai Edge DNS was down

#172

Post by raffraffraff »

decrypt wrote: post #120
benburleson wrote: post #62

Earlier quoted context omitted.

Yeah, my path was LastPass -> Bitwarden -> 1Password. Both Bitwarden and 1Password are great.

Same path. It'll be very hard to move away from 1Password. App experience, sync, security features like key in addition to master password, family organizer-based recovery of an account, these are a few things that stand out.

I prefer the browser addon for bitwarden over 1Password. Try editing a site in 1Password. It forces you to log into the full sir, whereas bitwarden can do almost everything right there in the addon.

Re: Akamai Edge DNS was down

#173

Post by zxcvbn4038 »

foobarbazetc wrote: post #114

Absolutely amazing how many billion $+ companies are single homed for DNS. I wonder how much they spend on multi-AZ redundant architectures...

Most CDNs offer huge incentives for sending them more traffic, a lot of time you end up in a contract obligated to handle X requests and Y gigabytes of traffic per month. But personally I believe you should never have a single provider for anything - particularly when it’s acceptable for a company to cut you off with no warning or recourse.

Re: Akamai Edge DNS was down

#174

Post by zxcvbn4038 »

cbeley wrote: post #31

I wonder if this is why LastPass is down. It has completely locked me out of my vault. You'd think it'd continue to work offline in a case like this. :/

When it comes to password managers, 1password is the one to beat. Much better experience in every regard.

Re: Akamai Edge DNS was down

#176

Post by zxcvbn4038 »

NotEvil wrote: post #92
davidjgraph wrote: post #77

Earlier quoted context omitted.

So, NS entries pointing to both? But then take the example your domain was in Route53 and AWS goes down. You can't configure the NS entries to avoid AWS DNS servers. Is the idea that child DNS servers detect the outage and cache the values in the name server(s) that remain up? But then, the cached values from AWS take a while to clear, TTL never seems to be applied properly. It always feels like the worst case in suc…

Ibthink if route53 was down. Your dns provider whouldn't able to go there. So it will go to the root who will give gcp one too. So your dns provider might try that. (I don't know if this is how it works, but I thibk that's how it supposed to work)

You typically have four name servers for a domain, but they don’t all have to be hosted with the same company. Very handy when your DNS provider decides to brag they are unhackable and the hackers reply by immediately hacking them followed by DDoSing them to death.

Re: Akamai Edge DNS was down

#177

Post by toast0 »

foobarbazetc wrote: post #114

Absolutely amazing how many billion $+ companies are single homed for DNS. I wonder how much they spend on multi-AZ redundant architectures...

Using multiple providers for mostly static DNS is easy, pick one as primary and AXFR to the other and notifications and whatever. Or it's not too hard to keep a zone file in source control and sync it to the providers.

Using multiple providers for fancy DNS, like only providing IPs that pass healthchecks or geotargetting users to datacenters gets pretty hard, because the different providers have similar capabilities, but no uniform interface, so you've either got to do it manually, or you have to build out your own abstraction that is probably limiting.

If possible, insourcing DNS makes the most sense to me, because if you can't keep your service online, it's not the worst if your DNS is offline; and if you can keep your service online, you probably won't mess up your DNS too badly.

Re: Akamai Edge DNS was down

#179

Post by gregsadetsky »

sakisv wrote: post #49
davidjgraph wrote: post #15

Serious question, has anyone properly solved the issue of DNS as a single point of failure?

Depending on what point you draw the line of "single point of failure" you could use multiple providers for your dns. GOV.UK for example uses both aws and gcp for DNS

gov.uk's traffic seems to be handled by Fastly, a well known CDN.

What I'm a bit surprised / unsure of is what happens when I run "dig ns gov.uk". The results are:

  gov.uk.     21559 IN  NS  ns1.surfnet.nl.
  gov.uk.     21559 IN  NS  auth50.ns.de.uu.net.
  gov.uk.     21559 IN  NS  ns3.ja.net.
  gov.uk.     21559 IN  NS  ns2.ja.net.
  gov.uk.     21559 IN  NS  ns0.ja.net.
  gov.uk.     21559 IN  NS  auth00.ns.de.uu.net.
  gov.uk.     21559 IN  NS  ns4.ja.net.
Who is ja.net , uu.net and surfnet.nl ..?

EDIT: I see that ja.net i.e. jisc.ac.uk "manages the second level domain .gov.uk" -- https://www.jisc.ac.uk/domain-registry . I imagine that uu.net and surfnet.nl are there for redundancy

Re: Akamai Edge DNS was down

#180

Post by tyingq »

toddh wrote: post #148
davidjgraph wrote: post #15

Serious question, has anyone properly solved the issue of DNS as a single point of failure?

You can still hardcode IP addresses. Not sure most people realize DNS isn't actually needed, you know, except for convenience and all that.

The "Host:" header in http[s] pretty much killed that. Half the internet would be a Cloudflare error page if we moved back to ip addresses :)
Post reply on HN