Cloudflare 1.1.1.1 Incident on July 14, 2025

Post by adornKey » Wed, Jul 16, 2025, 9:10 PM UTC

genewitch wrote: post #258

adornKey wrote: post #195

Earlier quoted context omitted.

I think just setting up Unbound is even less trouble. Servers come and go. Getting rid of the dependency altogether is better than having to worry who operates the DNS-servers and how long it's going to be available.

i am 95% certain i run unbound in a datacenter, and i have pihole local, my PC connects to pihole first, and if that's down, it connects to my DC; pihole connects to the DC and one of the filtered DNS providers (don't remember which) and GTEi's old server, that still works and has never let me down. No, not that one, the other one. i have musknet, though, so i can't edit the DNS providers on the router without buying…

Post by heraldgeezer » Wed, Jul 16, 2025, 9:11 PM UTC

kachapopopow wrote: post #112

Interesting to see that they probably lost 20% of 1.1.1.1 usage from a roughly 20 minute incident. Not sure how cloudflare keeps struggling with issues like these, this isn't the first (and probably won't be the last) time they have these 'simple', 'deprecated', 'legacy' issues occuring. 8.8.8.8+8.8.4.4 hasn't had a global(1) second of downtime for almost a decade. 1: localized issues did exist, but that's really the…

Post by seb1204 » Wed, Jul 16, 2025, 9:34 PM UTC

bombcar wrote: post #164

chrismorgan wrote: post #23

I’m surprised at the delay in impact detection: it took their internal health service more than five minutes to notice (or at least alert) that their main protocol’s traffic had abruptly dropped to around 10% of expected and was staying there. Without ever having been involved in monitoring at that kind of scale, I’d have pictured alarms firing for something that extreme within a minute. I’m curious for description o…

This is one of those graphs that would have been on the giant wall in the NOC in the old days - someone would glance up and see it had dropped and say “that’s not right” and start scrambling.

Post by kachapopopow » Wed, Jul 16, 2025, 9:43 PM UTC

immibis wrote: post #148

Tepix wrote: post #127

Earlier quoted context omitted.

There's more to DNS than just availability (granted, it's very important). There's also speed and privacy. European users might prefer one of the alternatives listed at https://european-alternatives.eu/category/public-dns over US corporations subject to the CLOUD act.

HN users might prefer to run their own. It's a low maintenance service. It's not like running a mail server.

Post by johnklos » Wed, Jul 16, 2025, 10:02 PM UTC

johnklos wrote: post #220

thunderbong wrote: post #15

How does Cloudflare compare with OpenDNS?

Cloudflare is a for-profit company in the US. Their privacy claims can't be believed. Even if we did believe them, we have no idea if rsolution data isn't taken by US TLA agencies.