[deleted]
[deleted]
Roll Your Own CDN
21–27 of 27 posts
Re: Roll Your Own CDN
#22I'd like to point out that google DNS among others uses anycast and are in reality composed of multiple servers geographically distributed, even if there is a single IP.
Re: Roll Your Own CDN
#23Please do not run your own DNS server if you do not have the knowledge or expertise to properly secure it. It is extremely irresponsible, and the article is also irresponsible for suggesting it and not having any information about rate limiting.
I run a recursing DNS server behind a firewall for my home servers -- is this risky?
If nobody can query the server from behind the firewall, you're fine. Nearly every home router runs a copy of dnsmasq as a recursive resolver for the users on the local network.
Re: Roll Your Own CDN
#24Please do not run your own DNS server if you do not have the knowledge or expertise to properly secure it. It is extremely irresponsible, and the article is also irresponsible for suggesting it and not having any information about rate limiting.
Do you have any suggestions/articles on where people can learn how to run a DNS safely?
Re: Roll Your Own CDN
#25I'd like to point out that google DNS among others uses anycast and are in reality composed of multiple servers geographically distributed, even if there is a single IP.
Right you are. Just updated the article to be more accurate on this matter.
Re: Roll Your Own CDN
#26Please do not run your own DNS server if you do not have the knowledge or expertise to properly secure it. It is extremely irresponsible, and the article is also irresponsible for suggesting it and not having any information about rate limiting.
Do you have any suggestions/articles on where people can learn how to run a DNS safely?
Unfortunately, I do not. Even though I personally learned on one of the big boys, I'd still pay somebody else to do this who has it as their dedicated job (like Amazon or Google). It's just not worth the headache and constant monitoring.
At minimum you need conservative rate limiting and monitoring that will page you when you start sending out gobs of traffic.
Re: Roll Your Own CDN
#27I'd like to point out that google DNS among others uses anycast and are in reality composed of multiple servers geographically distributed, even if there is a single IP.
The IP you query as a client is anycast, but I'd wager recursive queries out of their caches come from geo-friendly IPs.