TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

How Stack Overflow plans to survive the next DNS attack

133 pointsby samhamiltonover 8 years ago

9 comments

matt4077over 8 years ago
I think I measured Cloudflare&#x27;s performance and chose it over Google because it was consistently faster. If the stack-stackers are reading, I&#x27;d love to hear why they didn&#x27;t make the list.<p>Also, it&#x27;d be a great public service to publish the results. Even if it&#x27;s just enabled for a day per year or so the results would probably appreciated by many. And you could always sell your altruism as the need to continually monitor the situation :)
评论 #13365297 未加载
评论 #13363455 未加载
评论 #13365075 未加载
bksover 8 years ago
Umm, brilliant thank you for this.<p>I ended up with a Dyn &#x2F; Route53 configuration. We used libcloud to sync everything together. We also added the exported zone to Cloudflare but did not enable it.<p>We had actually planned for this, but in no way did we ever come close to your in depth testing. The @ Azure issue - thank you for uncovering this for the rest of us.
评论 #13363621 未加载
matt4077over 8 years ago
The calculation regarding the ideal number of name servers to list needs some empirical data regarding the likelihood of provider and server outages and the client reactions to it, right? Because otherwise 2 would must be the best number, if I&#x27;m not mistaken (Chance of hitting the provider that&#x27;s offline is always 0.5 on the first try, but the second try would be guaranteed to hit the other).<p>Here&#x27;s the math for expected number of tries if half of the servers are offline. (It&#x27;s a hypergeometric distribution but I couldn&#x27;t find a closed formula)<p>E(2 server) = 1 * 1&#x2F;2 + 2 * 1&#x2F;2 = 1.5<p>E(4 server) = 1 * 2&#x2F;4 + 2 * 2&#x2F;4 * 2&#x2F;3 + 3 * 2&#x2F;4 * 1&#x2F;3 = 1.67<p>E(8 server) = 1 * 4&#x2F;8 + 2 * 4&#x2F;8 * 4&#x2F;7 + 3 * 4&#x2F;8 * 3&#x2F;7 * 4&#x2F;6 + 4 * 4&#x2F;8 * 3&#x2F;7 * 2&#x2F;6 *4&#x2F;5 = 1.73
评论 #13365199 未加载
jlgaddisover 8 years ago
It&#x27;d be great if more DNS providers supported &quot;slaving&quot; a zone from an existing server. It would make it much easier to keep DNS synchronized across multiple providers.<p>Hurricane Electric supports this but most of the providers mentioned in this article do not.
评论 #13365259 未加载
评论 #13364439 未加载
评论 #13367092 未加载
ksecover 8 years ago
From my experience EdgeCast and DNSMadeEasy were consistently the fastest DNS. I guess both were dropped because of price when Google DNS and Route53 did the a similar job.<p>And as other have said, while Cloudflare may not be for everyone, their DNS is possibly the fastest. Not sure why SO decide to drop them.<p>*Some old Data <a href="http:&#x2F;&#x2F;www.dnsperf.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.dnsperf.com&#x2F;</a><p>I also wonder on the performance of DNSimple. But they dont see to emphasis much on performance.
评论 #13369785 未加载
elkteaover 8 years ago
Netflix have a tool for this as well <a href="https:&#x2F;&#x2F;github.com&#x2F;Netflix&#x2F;denominator" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;Netflix&#x2F;denominator</a>
评论 #13362947 未加载
评论 #13362938 未加载
Mojahover 8 years ago
I&#x27;m currently working on a tool [1] that can help with checking if all your different providers are &#x27;in sync&#x27; and responding with the same answers. Setups like these are only to grow more common as people realise a single DNS provider is a SPOF of its own.<p>Very good analysis of SO and a smart move to roll this out _before_ a new DNS outage!<p><a href="https:&#x2F;&#x2F;dnsspy.io" rel="nofollow">https:&#x2F;&#x2F;dnsspy.io</a>
评论 #13364013 未加载
cuu508over 8 years ago
Is there a good writeup somewhere about setting up redundant NS records at the zone apex? Or, more generally, &quot;DNS primer for busy developer&quot; article?
评论 #13362909 未加载
vaaraover 8 years ago
I wonder why there&#x27;s no consideration of anycast servers.
评论 #13365210 未加载