September 10, 2010

Topics


Search Site

Follow

  RSS CricketonDNS   RSS Infra20

Favorite Links


Tag Cloud


Archives

Entries for month: March 2010

The Wikipedia Entry for "Object Lesson"

March 24 2010 by Cricket Liu (Infoblox)

An hour or so ago, I tried to check a Wikipedia entry and my browser told me it couldn't find en.wikipedia.org.  Surely that's wrong, I thought, but pushed "Check Wikipedia" onto the stack and went on to something else.  Then, coincidentally, while searching for DNS-related news articles to inspire my next blog entry, I ran across this one from PC Magazine.  Turns out Wikipedia's European data center had an overheating problem that caused many of their servers to shut down in an act of self-preservation.  To shunt European traffic to their servers in Florida, they enacted their failure procedure, which modifies their DNS records.

Unfortunately, that failover mechanism was broken (they didn't specify how), and broken so badly that it interrupted DNS resolution for all Wikimedia sites globally.  While they quickly recognized and fixed the problem, it took as long as an hour for the corrected data to propagate because of TTLs.

Read more...

Posted in DNS Best Practices | Disaster Recovery | Automation | 1 comments



25 Years of .COM

March 14 2010 by Cricket Liu (Infoblox)

 

According to Wired, Symbolics.COM was registered on March 15, 1985.  Symbolics.COM was the very first subdomain of COM, making today the silver anniversary of, well, something.  The first delegation from .COM, I guess.  Since then, there have been tens of millions more, of course, so the very firstought to be significant.

I had the privilege of managing the 9th-oldest subdomain of .COM, HP.COM, for several years back in the late 1980s and early 1990s.  That job set me on the path I've been on for the last twenty-something years, and for that I'm very grateful.

What else has happened during those 25 years?  Countless versions of the BIND name server were released, from BIND 4.8 to the current 9.7.0.  For that, we owe the Internet Systems Consortium an enormous debt of gratitude.  BIND still powers, by our last measure, almost 75% of the authoritative name servers serving subzones of .COM, .NET and .ORG.  Commercial ventures with that kind of market share make people rich; the folks at ISC chose instead to pursue the nobler goal of producing the reference implementation of the Domain Name System, thereby facilitating the remarkable growth and success of the Internet.

 

 

Read more...

Posted in | 3 comments



Paul Vixie on DNSSEC vs. DNSCurve

March 12 2010 by Cricket Liu (Infoblox)

When I wrote my recent blog posting on DNSSEC vs. DNSCurve, I wasn't aware that Paul Vixie had already written his own blog entry on the same subject.  It also explains ISC's stance on DNSCurve.  Recommended reading.

Read more...

Posted in DNSSEC | 1 comments



Slides from our Recent DNSSEC Webinar

March 11 2010 by Cricket Liu (Infoblox)

If you're interested in the slides from the recent Infoblox/F5 DNSSEC webinar with Dan Kaminsky, Nate Meyer and Scott Rose, they're available here.  Thanks to everyone who listened in!

 

PS

If you're having trouble with the link above, here's a PDF of the slides.

 

 

Read more...

Posted in DNSSEC | DNS Security | 5 comments