211–220 of 229 posts
Serious question, has anyone properly solved the issue of DNS as a single point of failure?
You can still hardcode IP addresses. Not sure most people realize DNS isn't actually needed, you know, except for convenience and all that.
Obviously you are technically correct.
Absolutely amazing how many billion $+ companies are single homed for DNS. I wonder how much they spend on multi-AZ redundant architectures...
Earlier quoted context omitted.
> Whatever multi-home means, why can't there just be one service provider that does that? Many of these outages are due to pushing broken artifacts or configuration to production. A single provider can pretty easily offer geographic or network topological redundancy, but administrative and/or technological independence is pretty hard to achieve in a single company.
I mean, I guess what I'm saying is that in theory a single provider could purposely keep two different departments that manage their own artifacts independently.
If one dept deletes a record and the other doesn’t, how do you decide who’s right?
You could add a third dept that gives them both orders, but now that third dept is a single point of failure.
People don't believe me when I say how much DNS matters. So I wrote a song about it. https://soundcloud.com/ryan-flowers-916961339/dns-to-the-tun...
Sounds amazing! Do you maybe have a direct link? Soundcloud doesn't want us privacy-conscious users browsing their website :(
Earlier quoted context omitted.
because the way downdetector works is it just basically counts how many people are searching/visiting for down and if it's much higher than typical it flags the site as down. So if everyone searched "is google down" and visited the link on downdetector that was returned in the search, that would add to the downdetector count for that site. Downdetector doesn't actually know if the site is up or down.
I found this hard to believe, but it's correct. Downdetector only reports an issue if a significant number of users are impacted. To that end, Downdetector calculates a baseline volume of typical problem reports for each service monitored, based on the average number of reports for that given time of day over the last year. Downdetector’s incident detection system compares the current number of problem reports to thi…
Probably reported Google as “down” because a whole bunch of people use the word “Google” when they mean “internet”.
Earlier quoted context omitted.
because the way downdetector works is it just basically counts how many people are searching/visiting for down and if it's much higher than typical it flags the site as down. So if everyone searched "is google down" and visited the link on downdetector that was returned in the search, that would add to the downdetector count for that site. Downdetector doesn't actually know if the site is up or down.
So how do they reset status? The number of queries going down signifies return to normal status?
I ran DNS servers, among other things, in the late 90s with better uptime than these "multi-DC/AZ/geo redundant" services everyone uses these days.
Earlier quoted context omitted.
Sounds amazing! Do you maybe have a direct link? Soundcloud doesn't want us privacy-conscious users browsing their website :(
As you wish :) https://meetryanflowers.com/wp-content/uploads/2021/07/DNS.m...
Should probably have a script play that on loudspeakers when monitoring detects problems /s
I ran DNS servers, among other things, in the late 90s with better uptime than these "multi-DC/AZ/geo redundant" services everyone uses these days.
With all due respect, having also run auth DNS servers in the 90s, and seen the inside of Akamai’s CDN/DNS setup more recently, it isn’t remotely at the same level of scale or sophistication.
Earlier quoted context omitted.
Depending on what point you draw the line of "single point of failure" you could use multiple providers for your dns. GOV.UK for example uses both aws and gcp for DNS
Last time I tried setting NS to both cloudflare and digital ocean in my domain registry, cloudflare sent me an email saying the configuration is invalid and asked me to revert. Am I doing something wrong?