[dns-operations] How Stack Overflow plans to survive the next DNS attack

Tony Finch dot at dotat.at
Wed Jan 11 12:13:08 UTC 2017


Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:

> Very interesting and detailed paper on the choice of DNS providers, to
> avoid being victim of the next "Dyn attack".
>
> http://blog.serverfault.com/2017/01/09/surviving-the-next-dns-attack/

The Guardian published an article just before Christmas about their
approach, which is roughly similar to Stack Overflow's.

https://www.theguardian.com/info/developer-blog/2016/dec/23/multiple-dns-synchronising-dyn-to-aws-route-53

The Guardian are using existing open source tools (nsnotifyd and cli53)
to set up AWS Route 53 as a secondary of a more standard DNS service.
(I wrote nsnotifyd.)

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Trafalgar: North 5 to 7 veering northeast 4 or 5. Rough or very rough becoming
moderate or rough. Fair. Moderate or good.



More information about the dns-operations mailing list