site Search:


 
   
Our DNS service provider is not working great
by justin Saturday 07-Jan-2012
Easydns.com announcement

I hope they sort it out.
You can switch to the IP address 209.123.109.175 if you like.

view: topics flat text 
Post a:

WiFiguru
To infinity... and beyond
Premium
join:2005-06-21
Los Gatos, CA

Zerigo

Zerigo.com DNS works wonders.

Check em out

MVS
Premium
join:2005-04-18

Re: Zerigo

Another good provider is DNSMadeEasy.com. Great prices, and very reliable.
jimk
Premium
join:2006-04-15
Raleigh, NC
Reviews:
·voip.ms
·RoadRunner Cable

Re: Zerigo

said by MVS:

Another good provider is DNSMadeEasy.com. Great prices, and very reliable.

Apparently the issue is a massive DDoS attack on EasyDNS (or, to be more accurate, one of their customers domains according to their Twitter account).

DNS Made Easy is a very good provider (in fact, I strongly recommend them), but they have also been subject to a DDoS attack in the past.

Unfortunately this is something that can happen with any provider. The only answer is to use multiple providers. DNS Made Easy, Dyn, and ZoneEdit (among others) all offer this service.

Matt
All noise, no signal.
Premium
join:2003-07-20
Jamestown, NC
kudos:12

Re: Zerigo

said by jimk:

said by MVS:

Another good provider is DNSMadeEasy.com. Great prices, and very reliable.

Apparently the issue is a massive DDoS attack on EasyDNS (or, to be more accurate, one of their customers domains according to their Twitter account).

Or just do what we did when Dyn's corporate DNS service was DDoS'd, run your own primary and use someone like Dyn as a secondary.

davoice

join:2000-08-12
Saxapahaw, NC
Reviews:
·Comporium

Re: Zerigo

Yep. This is what every SMART site does - use more than 1 DNS provider. Preferably 3 of them. Our important corporate sites use 1) in-house, 2) provider A and 3) provider B. Thus to effectively take down DNS for any of those resources someone would have to successfully DDoS 3 completely different networks. Not impossible but a much higher bar.

Aside... I wish OpenDNS would start running a managed DNS hosting service on their infrastructure!

}Davoice
gyanendra

join:2012-02-02
110066
The optimal speed can be achieved by the compression of traffic and by minimizing server loads. Web acceleration will enable you bring about a drastic improvement in the web page response time. This kind of acceleration usually come in lesser costs and offers the best web application performance.

Omega
Displaced Ohioan
Premium
join:2002-07-30
Cheyenne, WY
said by WiFiguru:

Zerigo.com DNS works wonders.

Check em out

They have some magical defense against DDOS attacks?
--
What smells like blue?

imtim83
Premium
join:2001-06-03
Kenner, LA
See I told you all they are trying to.

DrStrange
Technically feasible
Premium
join:2001-07-23
West Hartford, CT
kudos:1

no kidding

Just ran into that issue.

Using the IP now.

Hope they sort it out.

FBGuy
yippee ki yay
Premium
join:2005-03-19

dyndns

i suggest dyndns.

rchandra
Stargate Universe fan
Premium
join:2000-11-09
14225-2105

Re: dyndns

+1

Matt
All noise, no signal.
Premium
join:2003-07-20
Jamestown, NC
kudos:12
said by FBGuy:

i suggest dyndns.

They were hit with a DDoS in November that had the same effect on our site.

»dyn.com/post-mortem-attack-to-dy···servers/

FBGuy
yippee ki yay
Premium
join:2005-03-19

Re: dyndns

Only their standard dns service was affected.

Smith6612
Premium,MVM
join:2008-02-01
North Tonawanda, NY
kudos:21

Haven't noticed anything...

I've been browsing around on and off all day today. DNS has been resolving without an issue for me. That might be because of my DNS servers caching results for some time when they don't receive a record, though.

Juggernaut
Irreverent or irrelevant?
Premium
join:2006-09-05
Everywhere
kudos:1

DSLR down

Had a problem for an hour or so. It's back up again, obviously!

IowaCowboy
Premium
join:2010-10-16
Indian Orchard, MA
Reviews:
·Verizon Broadban..
·Comcast
·AT&T Wireless Br..
·Verizon Wireless..

Time Warner is acting up as well

I am up at Grandma's house right now and I am having difficulty getting anything to load. Mass.gov, DSLR, and a bunch of other websites are being a pain in the neck right now. Must be that we're still waiting for D3.
--
All of my CPE (including my EMTA) is customer owned. The only Comcast owned equipment in my house is the CableCards in the two TiVO boxes I own.

Cheese
Premium
join:2003-10-26
Naples, FL
kudos:1

haven't had a problem with dslreports

but the page for the announcement failed

aSic
application specific
Premium
join:2001-05-17
Wakulla, FL

Re: haven't had a problem with dslreports

Google cache. Apparently the spiders crawled sometime recently, showing the announcement on the top of the page.
--
Teamwork is a lot of people doing what I say.

dauthiatull
Premium
join:2003-08-06
Toronto, ON

Im on it

the easydns HQ is a few blocks away.
I'll go kick the hamster to restart it.
--
a birth certificate is also proof of death, eventually

ItsNotMe

@teksavvy.com

Re: Im on it

EasyDNS suffers DoS attack...

cabana
Department of Adjustments
Assistant
join:2000-07-07
New York, NY

Re: Im on it

@easydns on Twitter has been pretty transparent and reporting that they are in final mop up stage. Hopefully easing.

"The attack is multi-faceted, multi-gb/sec SYN flood, ICMP and DNS flood. Working with Prolexic to get DNS2 back online ASAP"

koitsu
Premium,MVM
join:2002-07-16
Mountain View, CA
kudos:14

DSLR/BBR, stop using EasyDNS

This outage has been discussed on the official outages mailing list. I pointed out in my post that DSLR/BBR's official NS records refer to 5 EasyDNS nameservers -- except of those 5, there are only two unique IPs, so really you aren't getting anything more than primary and secondary DNS.

Karl0 See Profile et al, I would strongly advise you reconsider what DNS provider you're choosing to use for your domains here. Any DNS provider which solicits use of 5 FQDNs yet hands out only 2 unique IPs is a provider who probably doesn't understand the term "redundancy". E.g. it gets you nothing more than standard primary/secondary DNS (no tertiary). Heed my words!
--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer.
rradina

join:2000-08-08
Chesterfield, MO

Re: DSLR/BBR, stop using EasyDNS

FYI -- As the news guy, Karl might be considered the "face" of DSLR but Justin owns and operates it.

koitsu
Premium,MVM
join:2002-07-16
Mountain View, CA
kudos:14

Re: DSLR/BBR, stop using EasyDNS

Yeah you're right, sorry -- total brain fart. I'm never sure who to nag, Karl, Justin, or nil.
NWOhio

join:2011-10-25
Toledo, OH
Thank that if you want but others have something else to say about that.

dib22

join:2002-01-27
Kansas City, MO
kudos:2
Perhaps you don't know about Anycast?

edit: and since everyone is popping up their recommended dns provider, let me toss in: »dns.he.net/
NWOhio

join:2011-10-25
Toledo, OH

Re: DSLR/BBR, stop using EasyDNS

must not work that well.

koitsu
Premium,MVM
join:2002-07-16
Mountain View, CA
kudos:14
said by dib22:

Perhaps you don't know about Anycast?

I'm familiar with it, but I was not lead to believe EasyDNS implemented it. Googling a bit, I see they implemented anycast in late 2011 -- not slamming them for that, just saying prior to now I was under the impression they weren't using it.

edit: and since everyone is popping up their recommended dns provider, let me toss in: »dns.he.net/

As someone who used to have co-location with them, I wouldn't recommend Hurricane Electric for anything mission-critical. Their FMT1 and FMT2 datacenters are plagued with chronic router failures (with redundancy never kicking in). You can read about our experiences with them, and others' reports as well. HE being down comes up on the outages list every few months, and even more so now that they're an IPv6 tunnel broker. Stay away from HE if you care even remotely about reliability.
--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer.

dib22

join:2002-01-27
Kansas City, MO
kudos:2

Re: DSLR/BBR, stop using EasyDNS

said by koitsu:

As someone who used to have co-location with them, I wouldn't recommend Hurricane Electric for anything mission-critical.

Have been using their DNS for years... never had one issue. Sorry about your luck with them!

Matt
All noise, no signal.
Premium
join:2003-07-20
Jamestown, NC
kudos:12
said by koitsu:

This outage has been discussed on the official outages mailing list. I pointed out in my post that DSLR/BBR's official NS records refer to 5 EasyDNS nameservers -- except of those 5, there are only two unique IPs, so really you aren't getting anything more than primary and secondary DNS.

»en.wikipedia.org/wiki/Anycast

Those two IPs could be pointed to 1,000 servers, of which you are directed to the nearest single server based upon your routing.

As noted at their page here, EasyDNS, uses Anycast, so at a minimum, DSLR is hosted by 14 nameservers, at maximum, 25.

dillyhammer
Back to Teksavvy
Premium,MVM
join:2010-01-09
Hamilton, ON
kudos:9
Reviews:
·Cogeco Cable
·TekSavvy DSL
·Caneris
·voip.ms
said by koitsu:

This outage has been discussed on the official outages mailing list. I pointed out in my post that DSLR/BBR's official NS records refer to 5 EasyDNS nameservers -- except of those 5, there are only two unique IPs, so really you aren't getting anything more than primary and secondary DNS.

Karl0 See Profile et al, I would strongly advise you reconsider what DNS provider you're choosing to use for your domains here. Any DNS provider which solicits use of 5 FQDNs yet hands out only 2 unique IPs is a provider who probably doesn't understand the term "redundancy". E.g. it gets you nothing more than standard primary/secondary DNS (no tertiary). Heed my words!

No offence, but your view of their service is very one dimensional. EasyDNS has one of the most extensible DNS architectures available. Anywhere. They are the very epitome of "redundant". This attack would have felled anyone, it was so intense.

Now, if you want to slag their new interface I'd probably join you because it still needs a lot of work, but you'd have a hard time surpassing the quality of their service under the hood. Not slaggable. DSLr/BBR has chosen wisely.

Mike
--
No more UBB... nor more AVP... now it's "Capacity Based". Oh... wait... isn't that what we wanted?

MEDIAN2k3
Localhost
Premium
join:2002-12-04
Bronx, NY
kudos:1

FiOS DNS didnt work but googles did wtf?

I used googles dns servers and got back to you, however my FiOS DNS servers couldnt resolve dslreports.com
--
What a great place to be 127.0.0.1

cabana
Department of Adjustments
Assistant
join:2000-07-07
New York, NY
Host:
AT&T Southeast
56k Lookout! (broa..

Latest as of 11:27 p.m. EST

Click for full size
Twitter Update

source: »blog.easydns.org/2012/01/07/dos-···ersists/

Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:7

DNS

Few problems tonight and early this morning... not too bad up here in Canada.
tmc8080

join:2004-04-24
Brooklyn, NY

weird..

right around the time I decide to switch my proxy settings to watch overseas TV, this DNS downtime happens, ugh.

whfsdude
Premium
join:2003-04-05
Washington, DC

IPv6

Justin, mind posting BBR'S IPv6 address?

See 6 replies to this post
Madtown
Premium
join:2008-04-26
Madera, CA

OpenDNS.

»www.opendns.com/ Why not use this?

dauthiatull
Premium
join:2003-08-06
Toronto, ON

easydns faq about the attack

»blog.easydns.org/2012/01/08/mini···-attack/
--
a birth certificate is also proof of death, eventually

Simba7
I Void Warranties

join:2003-03-24
Billings, MT

1 edit

More than EasyDNS getting hit

Looks like this rogue domain is bouncing around several DNS providers and crashing them.

No one could've predicted this. I'll be checking ZoneEdit and see if they've gotten nailed.

All I can say to the guys at EasyDNS.. Hold on tight, because I don't think the idiots responsible are done. It's going to be a long week.

Romney2012
Defeat Obama 2012-Chg we can believe in
Premium
join:2002-03-03
USA
kudos:4

1 edit

Re: More than EasyDNS getting hit

said by Simba7:

Looks like this rogue domain is bouncing around several DNS providers and crashing them.

No one could've predicted this. I'll be checking ZoneEdit and see if they've gotten nailed.

All I can say to the guys at EasyDNS.. Hold on tight, because I don't think the idiots responsible are done. It's going to be a long week.

What rogue domain? A link to this info if you have one?

Edit: EasyDNS claims it was a porn domain and that easydns will no longer accept porn or gambling domains as clients from now on.
--
The nine most terrifying words in the English language are, I'm from the government and I'm here to help.
»www.politico.com/2012-election/

virtualspin

join:2004-12-13
Utica, NY

DNSResolvers.com cache1.dnsresolvers.com -> 205.210.42.205

»dnsresolvers.com/

easyDNS launches DNSResolvers.com: no frills, pure DNS lookups – fully patched
Some of our members have expressed reservations around using any DNS resolver that "alters" the traffic in any way, including typos and non-existent domains. Which is good news for us, because we've done this so fast we haven't had time to build anything like that even if we wanted to. What we did want to do is provide a couple of DNS resolvers for use by our members (or anybody else) who just want to know they're using a system run by people who are actively following this situation and are proactively keeping their own resolvers and caching nameservers as secure as the protocol allows.

With this in mind we've turned up DNSresolvers.com today. No website, no user interface, at the moment it's just a couple of resolvers with the latest security patches in place and that will continue to do so, open to use by anybody who wants. We have no idea where this will go, and it's not really an official easyDNS "service" per se. But we wanted to do something to give our members options.

If you want to use DNSresolvers.com, the details are as follows:

cache1.dnsresolvers.com -> 205.210.42.205
cache2.dnsresolvers.com -> 64.68.200.200
Fishie

join:2003-01-14
Riverside, CA

DNS Benchmark

DNS performance not only includes the performance of the server itself, but the location of the server in relation to the user as well. In essence, one DNS server does not fit all. For example, people continuously tell me to use Google's DNS servers. However, I routinely receive subpar performance when using their DNS servers. DNS server performance is better checked by each individual user. Thus, running Steve Gibson's DNS benchmark utility is the best way to tell which DNS server will meet the needs of an individual user.

Monday, 04-Jun 22:22:33 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.