Live data from Hacker News

Xip.io - a magic domain name that provides wildcard DNS for any IP address

xip.io

51–60 of 128 posts

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#52
This would be great for testing multi-tenanted cloud applications. For example:

tenant1.10.0.0.1.xip.com tenant2.10.0.0.1.xip.com tenant3.10.0.0.1.xip.com

They all resolve to the same IP Address (10.0.0.1), but now the web application at that address knows which tenancy is being targeted.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#53

I've also made use of lvh.me (local virtual host), a url who's dns points at 127.0.0.1. It's good for testing subdomains on localhost.

localhost.microsoft.com and localhost.yahoo.com also used to redirect to 127.0.0.1. And, of course, this wreaked utter havoc with cookies (since cookies are accessible across the entire domain). Zalewski discusses in TTW (The Tangled Web).

DNS hackery is really dangerous.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#54
post #50

I've identified several technical problems with this domain, and this isn't an example of how to properly operate DNS. 37signals is setting an absurdly low TTL on these records (10 minutes; the answers never change, I absolutely do not understand the logic behind this TTL), which means every 10 minutes you're re-resolving a local address , through a CNAME (so two DNS round trips, and in my case this resolution took b…

It depends on what you're working on. If you're developing a SaaS application where an individual instance should be providing group features based on the hostname, suddenly host names becomes a development detail. Though I agree that in most web applications this isn't the case.

I'm sorry, I edited my comment (the broken zone is more troubling to me than the impetus for using it) and made yours look out-of-place. You responded to something accurate the first go, and I agree with you.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#55

I've identified several technical problems with this domain, and this isn't an example of how to properly operate DNS. 37signals is setting an absurdly low TTL on these records (10 minutes; the answers never change, I absolutely do not understand the logic behind this TTL), which means every 10 minutes you're re-resolving a local address , through a CNAME (so two DNS round trips, and in my case this resolution took b…

Patches welcome.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#56

I've identified several technical problems with this domain, and this isn't an example of how to properly operate DNS. 37signals is setting an absurdly low TTL on these records (10 minutes; the answers never change, I absolutely do not understand the logic behind this TTL), which means every 10 minutes you're re-resolving a local address , through a CNAME (so two DNS round trips, and in my case this resolution took b…

Patches welcome.

I can't patch your registrar misconfiguration, but, thanks for the response.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#57

Earlier quoted context omitted.

Isn't it controlled by whoever is running the .arpa domain?

Yes and no. There is nothing [1] preventing any DNS server from responding authoritatively to a request that it is presented with, except a moral correctness to the protocol. [1] If you ever wondered how openDNS or your ISP sends you spammy web pages when you try to resolve something that doesn't exist, or how the hotel hijacks your browser into giving you a login page, this is it. You look for google.com it notes yo…

Is this to say what matters in terms of the response you get is which DNS server you query? And consequently whoever controls that server?

You run your own .arpa zone for 10. So you control the PTR responses for 10.0.0.1 that are directed to your home DNS server?

Isn't it true that anyone can download a copy of .arpa zone for the public address space? You could load this into your .arpa zone on your home DNS server. Couldn't you shave off a few queries out to the internet for each PTR lookup that way?

Running a home DNS server sounds like a smart idea. You say "nothing is to stop...", and due to the "rules" allowing out-of-bailiwick delegations that's true (and also a source of some annoying side effects: cache poisoning, extra queries if glue is ignored, etc.), but what if you designed a DNS server to only query authoritative servers? Then getting the right response would become just a matter of selecting the proper authoritative server from a list, verifying you are actually connecting to that server and then securing the connection from tampering, right? DNSSEC wouldn't address those needs, would it?

Anyway, running your own DNS server sounds like a smart idea.

No spammy web pages like OpenDNS?

Do you connect to your home DNS server while you're staying at hotels to avoid paywalls? If these devices were not crippled maybe you could travel with a good /etc/hosts file with all your important websites listed.

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#59
post #58

Earlier quoted context omitted.

I can't patch your registrar misconfiguration, but, thanks for the response.

[deleted]

(The author of the software wrote a comment here: "So you're just here to shit on things?", which he has since deleted.)

I genuinely and honestly cannot log into your Gandi account and fix your nameserver delegation, so that means I'm just here to shit on things? That's a logical leap for you? You are delegating xip.io to a nameserver that is refusing queries for your zone; that's seriously broken and can result in resolution failures, making your clever hack worthless.

I don't know why I bother providing feedback, since people from your school of thought (I'm looking at the 37signals community as a whole, here, which you're being a shining steward of) just get defensive and take your software being broken personally. You wrote a poor DNS server. Read the spec, study BIND's or NSD's source to understand the years of work that went into this before you, and understand the problems I've pointed out. I just get annoyed when people flagrantly misimplement DNS, because that starts trends, like Heroku suggesting for a long time that you use a CNAME for @ (don't do that).

I'm not making this up: http://i.imgur.com/zFNkV.png

Re: Xip.io - a magic domain name that provides wildcard DNS for any IP address

#60

For those who missed the other announcement, Pow 0.4.0 has xip.io support built-in: http://37signals.com/svn/posts/3191-announcing-pow-040-with-...

Does that actually work? On my machine pow has ipfw configured so that it only forwards requests to 127.0.0.1 not to 10.0.1.whatever so project.10.0.0.5.xip.io fails.

Filed an issue: https://github.com/37signals/pow/issues/293

Edit: a) I should RTF man page for ipfw, b) nevertheless my OS X behaved strangely. I rebooted and now everything works.

Anyway, great project, have been a happy user of pow master for quite a while.

Post reply on HN