<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><blockquote type="cite" class="">PagerDuty should, at minimum, run their own DNS in addition to using someone like Dyn. Not put all their DNS eggs in a single basket.<br class=""></blockquote><div class=""><br class=""></div><div class="">It’s usually a good idea to have redundancy at every level. But I worry about people who want to run their own NS as well as someone like Dyn. Mostly because a lot of people will run that NS on their own LAN. When a large DDoS comes… well, you get the picture.</div><div class=""><br class=""></div><div class="">If you are looking for a company who does it “right”, how about:</div><blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class=""><div class=""><span style="font-family: monospace;" class="">Fri Oct 21 14:52:47 dhcp-220-234:patrick:~ $ dig +short ns <a href="http://pornhub.com" class="">pornhub.com</a></span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://sdns3.ultradns.com" class="">sdns3.ultradns.com</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://ns3.p44.dynect.net" class="">ns3.p44.dynect.net</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://ns1.p44.dynect.net" class="">ns1.p44.dynect.net</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://sdns3.ultradns.net" class="">sdns3.ultradns.net</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://ns2.p44.dynect.net" class="">ns2.p44.dynect.net</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://ns4.p44.dynect.net" class="">ns4.p44.dynect.net</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://sdns3.ultradns.org" class="">sdns3.ultradns.org</a>.</span></div><div class=""><span style="font-family: monospace;" class=""><a href="http://sdns3.ultradns.biz" class="">sdns3.ultradns.biz</a>.</span></div></blockquote><div class=""><br class=""></div><div class=""><div class="">Look at that - multiple managed DNS providers, and 4 separate TLDs!</div><div class=""><br class=""></div><div class=""><div class="">:-)</div></div><div class=""><span style="font-family: Inconsolata;" class=""><br class=""></span></div><div class=""><span style="font-family: Inconsolata;" class="">-- </span></div></div><div class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font face="Inconsolata" class="">TTFN,</font></div><div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font face="Inconsolata" class="">patrick</font></div></div></div></div></div></div></div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Oct 21, 2016, at 1:44 PM, Seth Mattinen <<a href="mailto:sethm@rollernet.us" class="">sethm@rollernet.us</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 10/21/16 10:16, Chris Adams wrote:<br class=""><blockquote type="cite" class="">[moved to outages-discussion]<br class=""><br class="">Once upon a time, Patrick W. Gilmore via Outages <<a href="mailto:outages@outages.org" class="">outages@outages.org</a>> said:<br class=""><blockquote type="cite" class="">> However, Dyn is far, far better positioned to withstand attacks than a company like PagerDuty could possibly be on their own. So I think PagerDuty did the right thing in using Dyn.<br class=""></blockquote>The flip side is that the concentration of services in "specialist"<br class="">hands makes it easier to attack a large number of companies at once. If<br class="">PagerDuty ran their own DNS, they are not a likely target of an attack,<br class="">so would be unaffected.<br class=""></blockquote><br class=""><br class="">PagerDuty should, at minimum, run their own DNS in addition to using someone like Dyn. Not put all their DNS eggs in a single basket.<br class=""><br class="">Maybe Dyn needs to deploy anycast nodes at every internet exchange of every size and scale instead of relying on a small number of beefy anycast nodes in select locations if their customers are going to have a single point of failure.<br class=""><br class="">Look at eBay:<br class=""><br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://sjc-dns1.ebaydns.com" class="">sjc-dns1.ebaydns.com</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://sjc-dns2.ebaydns.com" class="">sjc-dns2.ebaydns.com</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://smf-dns1.ebaydns.com" class="">smf-dns1.ebaydns.com</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://smf-dns2.ebaydns.com" class="">smf-dns2.ebaydns.com</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns1.p47.dynect.net" class="">ns1.p47.dynect.net</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns2.p47.dynect.net" class="">ns2.p47.dynect.net</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns3.p47.dynect.net" class="">ns3.p47.dynect.net</a>.<br class=""><a href="http://ebay.com" class="">ebay.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns4.p47.dynect.net" class="">ns4.p47.dynect.net</a>.<br class=""><br class="">But then PayPal falls flat:<br class=""><br class=""><a href="http://paypal.com" class="">paypal.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns1.p57.dynect.net" class="">ns1.p57.dynect.net</a>.<br class=""><a href="http://paypal.com" class="">paypal.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns2.p57.dynect.net" class="">ns2.p57.dynect.net</a>.<br class=""><a href="http://paypal.com" class="">paypal.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns3.p57.dynect.net" class="">ns3.p57.dynect.net</a>.<br class=""><a href="http://paypal.com" class="">paypal.com</a>.<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>172800<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns4.p57.dynect.net" class="">ns4.p57.dynect.net</a>.<br class=""><br class="">~Seth<br class="">_______________________________________________<br class="">Outages-discussion mailing list<br class=""><a href="mailto:Outages-discussion@outages.org" class="">Outages-discussion@outages.org</a><br class="">https://puck.nether.net/mailman/listinfo/outages-discussion<br class=""></div></div></blockquote></div><br class=""></body></html>