[192159] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Dyn DDoS this AM?

daemon@ATHENA.MIT.EDU (Niels Bakker)
Fri Oct 21 19:21:30 2016

X-Original-To: nanog@nanog.org
Date: Sat, 22 Oct 2016 01:19:24 +0200
From: Niels Bakker <niels=nanog@bakker.net>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <m2twc5uypa.wl-randy@psg.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

>>>anyone who relies on a single dns provider is just asking for 
>>>stuff such as this.
>>I'd love to hear how others are handling the overhead of managing 
>>two dns providers.

* randy@psg.com (Randy Bush) [Sat 22 Oct 2016, 00:28 CEST]:
>good question.  staying in-band, hidden primary comes to mind.  but 
>i am sure clever minds can come up with more clever schemes.

The point of outsourcing DNS isn't just availability of static 
hostnames, it's the added services delivered, like returning different 
answers based on source of the question, even monitoring your 
infrastructure (or it reporting load into the DNS management system).

That is very hard to replicate with two DNS providers.


	-- Niels.

home help back first fref pref prev next nref lref last post