[01:23] *** yuicat has quit IRC (Ping timeout: 268 seconds) [01:24] *** yuicat has joined #arpnetworks [09:21] *** RandalSchwartz has quit IRC (Ping timeout: 245 seconds) [09:49] *** RandalSchwartz has joined #arpnetworks [11:20] Twitter DNS: ;; connection timed out; no servers could be reached [11:25] yeah dyn.com is under attack (ddos) [11:26] Yup. [11:26] Maybe someone here can explain what's going on, though: why isn't secondary DNS a fix for this? [11:26] Or, do Twitter, GitHub, etc, not have secondaries? [11:31] well, if secondary dns means using a second provider, then no, they don't [11:31] I'd like to know the scale of the DDOS in Gig/sec or Tbit/sec [11:32] apparently dyn usually posts post-mortems, so when they're done mitigating they might post details [11:33] seems like kayak might be their customer too, they're also having flaky dns [11:33] Today I learned that basically every Web site uses Dyn. [11:36] lol wtf [11:39] i actually didn't notice until someone commented about it on a mailing list... [11:41] * brycec hasn't noticed either [11:43] Apparently I haven't tried to reach an affected site today. *shrug* [11:44] And now I get to feel good that the domains I maintain use secondaries on separate providers. :) [11:51] brycec: like he.net and cloudflare? [11:52] That's an example, sure. [11:52] * brycec wonders if he can slave from Cloudflare [11:55] *** pyvpx has quit IRC (Remote host closed the connection) [12:12] awsdns-52.com awsdns-21.co.uk awsdns-32.org awsdns-01.net [12:12] does amazon understand the purpose of a domain name? [12:24] Not sure I see your point (or understand the context) [12:24] I can understand registering the same domain under different tlds [12:25] presumably the tlds maintain distributed enough servers that them all having trouble at once is unlikely [12:25] the root zone certainly does and I'm pretty sure .com .net etc do, but who knows about the smaller tlds [12:26] but they've got awsdns-[00-63].com and I can't understand that [12:28] Ahh [12:50] /win 4 [12:50] /lose :) [12:51] why don't twitter etc run their own dns :) [12:51] it's not the first time there has been a long outage [12:53] Or have a secondary? That'd be a good start. [13:10] i assume their provider wouldn't allow such a thing [13:10] like they have some kind of exclusive agreement [13:11] That's a hilarious idea. I hope that's what happened. [13:12] cloudflare only allows you to take over dns on normal accounts [13:13] but some of the bigger ones want to advertise that the bigger companies rely on them [13:42] i am glad Dyn is just a secondary for my sites [13:42] good secondary dns is so hard to come by these days :( [13:44] what you really want is two competely separate servers run by completely separate groups [13:44] what people usually get is two servers sitting next to each other configured exactly the same [13:44] haha [13:44] you want multiple locations, with multiple servers [13:44] the problem is how to sync them [13:44] but as long as you take away order requirements etc it's pretty simple [13:45] like you take away the requirement to be "in sync" [13:45] which for things like twitter should be fine [13:45] and so with your distributed web site, you host your dns on the same servers [13:47] the master site with proxies from various locations will never be able to match performance wise [13:49] I'd like different hardware and even BIND in one place and NSD in the other... [13:49] different OSes [13:49] that's how you stop these pesky software bugs from killing everything all at once [13:49] mkb: appraently knot suggested that you could run nsd and knot [13:49] the idea of running bind is uh, ick. [13:49] bind has had quite a lot of bugs that can crash the server yes [13:50] well yeah... I didn't know of any other dns servers [13:50] knot is made by the same people as bird [13:50] cz net (net.cz) [13:50] I thought isc made bind [13:50] ohbird [13:50] https://www.knot-dns.cz/ [13:51] cz.nic [13:51] not .net :) [13:53] writing a dns server is probably as interesting as writing a routing daemon to most people. ie not very interesting, but technically challenging [13:53] so i suppose it makes sense to make both of them [13:57] ``With release version 1.2.0 the project was renamed Bundy to terminate ISC involvement in the project.'' [13:57] concerning bind [13:57] what [13:58] but it's not clear what that means because I thought BIND was already on version 9 [13:58] BIND 10 [13:58] BIND 9 is the one everyone should be using if they are using BIND [13:58] in fack 9.11 just came out with some big feature updates - https://www.isc.org/bind-9-11-new-features/ [13:58] fact* [13:59] ``In addition to DNS service, the BIND10 suite also included IPv4 and IPv6 DHCP server components'' oh god it does everything [13:59] bind 4 is when it was more stable [14:00] and what is with writing completely new software and naming it the same as something else [14:00] it happens often mkb [14:00] it's called refactoring [14:00] BIND 10 was supposed to be a refactor yeah [14:00] it often takes years [14:01] and then the old version adds features the new version doesn't have [14:01] but they're continuing to work on the old version [14:01] adn there are incompatibilities and complications [14:01] so they've just made two programs with the same name [14:01] and then peopel say they like the old version better than the new one [14:01] often it's becuase someone thinks that everything should be OO [14:01] a real refactor is done gradually without a complete fork [14:01] and that things should shift frmo C to C++ [14:01] maybe add better module system with more injunctions etc [14:01] leading to confusing code mess [14:02] i haven't seen any of the source for any bind [14:02] i looked at some gnu source once though. and i was disgusted :) [14:03] yeah the only way to find anything is grep [14:03] i found openbsd soruce much easier to follow than linux source [14:04] well with congestion control, initcwnd etc [14:04] i hacked initcwnd into openbsd for testing myself before there was support heh [14:05] and they know how to do long-term refactors correctly too [14:05] yeah [14:05] openbsd is very good in that respect [14:47] If you were twitter, why wouldnt you swap out the name servers to an alternate backup provider [14:47] I mean they must have a copy of their own zone [14:57] github did that [14:57] I guess Twitter just decided to wait it out [14:57] or didn't have a contingency plan in place :> [14:58] reddit also? [15:04] twitter and reddit are working fine for me [15:12] Reddit's hosted on Route53 according to my lookup just now, same as what Github switched to. (I don't know what Reddit was using before today) [15:13] an iphone 7 exploded [15:17] i thought reddit was on cloudflare [15:17] hmm reddit is on fastly? [15:18] I just looked at the whois :p [15:18] Plain and simple [15:18] i'm pretty sure reddit used to be on cloudflare [15:19] (It's not even a recent nameserver change according to whois, reddit.com's last registrar update was 7 September. [15:19] i can't say i've checked often [15:20] i really don't know how they compare [15:21] cloudflare do dns fastly don't [15:25] github uses fastly too [16:01] *** Seji has quit IRC (*.net *.split) [16:01] *** mjp_ has quit IRC (*.net *.split) [16:01] *** yuicat has quit IRC (*.net *.split) [16:01] *** reardencode has quit IRC (*.net *.split) [16:01] *** forgotten has quit IRC (*.net *.split) [16:01] *** nathani has quit IRC (*.net *.split) [16:01] *** joepie91_ has quit IRC (*.net *.split) [16:01] *** _iwc has quit IRC (*.net *.split) [16:01] *** qbit has quit IRC (*.net *.split) [16:01] *** fIorz has quit IRC (*.net *.split) [16:01] *** dne has quit IRC (*.net *.split) [16:01] *** sjackso has quit IRC (*.net *.split) [16:01] *** toeshred has quit IRC (*.net *.split) [16:01] *** gizmoguy has quit IRC (*.net *.split) [16:01] *** neish has quit IRC (*.net *.split) [16:01] *** mike-burns has quit IRC (*.net *.split) [16:01] *** karstensrage has quit IRC (*.net *.split) [16:01] *** mhoran has quit IRC (*.net *.split) [16:01] *** toddf has quit IRC (*.net *.split) [16:01] *** KILLALLHUMANS01 has quit IRC (*.net *.split) [16:01] *** awyeah has quit IRC (*.net *.split) [16:01] *** pjs has quit IRC (*.net *.split) [16:01] *** carvite has quit IRC (*.net *.split) [16:01] *** mrsaint has quit IRC (*.net *.split) [16:01] *** eryc has quit IRC (*.net *.split) [16:01] *** tooth has quit IRC (*.net *.split) [16:01] *** mkb has quit IRC (*.net *.split) [16:01] *** jcv has quit IRC (*.net *.split) [16:01] *** RandalSchwartz has quit IRC (*.net *.split) [16:01] *** trobotham has quit IRC (*.net *.split) [16:01] *** hive-mind has quit IRC (*.net *.split) [16:01] *** ant has quit IRC (*.net *.split) [16:01] *** tabthorpe has quit IRC (*.net *.split) [16:01] *** dj_goku has quit IRC (*.net *.split) [16:01] *** JC_Denton has quit IRC (*.net *.split) [16:01] *** mjp has joined #arpnetworks [16:06] *** mjp is now known as 17SAAC40T [16:06] *** hive-mind has joined #arpnetworks [16:06] *** ant has joined #arpnetworks [16:06] *** tabthorpe has joined #arpnetworks [16:06] *** yuicat has joined #arpnetworks [16:07] *** reardencode has joined #arpnetworks [16:07] *** forgotten has joined #arpnetworks [16:07] *** nathani has joined #arpnetworks [16:07] *** joepie91_ has joined #arpnetworks [16:07] *** awyeah has joined #arpnetworks [16:07] *** pjs has joined #arpnetworks [16:07] *** carvite has joined #arpnetworks [16:07] *** mrsaint has joined #arpnetworks [16:07] *** eryc has joined #arpnetworks [16:07] *** tooth has joined #arpnetworks [16:07] *** _iwc has joined #arpnetworks [16:07] *** qbit has joined #arpnetworks [16:07] *** dj_goku has joined #arpnetworks [16:07] *** JC_Denton has joined #arpnetworks [16:08] *** fIorz has joined #arpnetworks [16:08] *** dne has joined #arpnetworks [16:08] *** sjackso has joined #arpnetworks [16:08] *** toeshred has joined #arpnetworks [16:08] *** gizmoguy has joined #arpnetworks [16:08] *** neish has joined #arpnetworks [16:08] *** mike-burns has joined #arpnetworks [16:08] *** karstensrage has joined #arpnetworks [16:08] *** mhoran has joined #arpnetworks [16:08] *** toddf has joined #arpnetworks [16:08] *** KILLALLHUMANS01 has joined #arpnetworks [16:08] *** tepper.freenode.net sets mode: +o toddf [16:08] *** RandalSchwartz has joined #arpnetworks [16:08] *** trobotham has joined #arpnetworks [16:13] *** mkb has joined #arpnetworks [16:13] *** jcv has joined #arpnetworks [16:15] *** Seji has joined #arpnetworks [17:11] *** qbit has quit IRC (Quit: WeeChat 1.5) [17:15] *** qbit has joined #arpnetworks [19:05] thats interesting ... amazon.com uses dyn as some of it NS [19:05] in combination with ultradns [19:13] because they don't want their website to go down when aws gets attacked [19:14] LOLZ