Live data from Hacker News

Don’t run this on any system you expect to be up they said, but we did it anyway

byte.nl

21–24 of 24 posts

Re: Don’t run this on any system you expect to be up they said, but we did it anyway

#21
post #16

Earlier quoted context omitted.

That assumes they have control over the DNS. Sounds like they don't with many end customers.

They shouldn't be giving their customers a static IP, they should be giving them a 'customername.ourplatform.com' address that the customer can point a CNAME at.

This was addressed in the article: There is a tendency within that industry of whitelisting API access etc. by source IP, so their customers do need static IPs not primarily for inbound traffic, but to be able to access the APIs they need.

Now it's still stupid of them to not abstract that away from the individual customer servers but, but this issue isn't solved with cname's.

Re: Don’t run this on any system you expect to be up they said, but we did it anyway

#23
On the one hand I am very impressed they managed this, but on the other, it does seem very sledgehammer/nut-esque. Even without virtual IPs, it seems a little silly that their customers weren't running N+1 redundant instances that could be taken out, upgraded and then swapped without disrupting normal operations.

Again, very impressive as an academic exercise, especially considering the given script isn't actually that complicated, but wow, they had some serious guts running this in production!

Post reply on HN