[outages] EasyDNS DDoS

[Jeremy Chadwick]

On Sat, Jan 07, 2012 at 06:02:27PM -0500, Mark Kamichoff wrote:
> FYI, looks like EasyDNS' nameservers are under a DDoS... 
> 
> https://twitter.com/#!/easyDNS/status/155774538272092160
> 
> Among other things, sites like http://soekris.com/ are either loading
> /very/ slowly or just not at all.

Another popular site which is affected by this is
DSLReports/BroadbandReports.

I'm quite surprised so many people rely entirely on one provider for
primary, secondary, and tertiary DNS.

$ dig @a.gtld-servers.net ns dslreports.com

;; QUESTION SECTION:
;dslreports.com.                        IN      NS

;; AUTHORITY SECTION:
dslreports.com.         172800  IN      NS      ns1.easydns.com.
dslreports.com.         172800  IN      NS      ns2.easydns.com.
dslreports.com.         172800  IN      NS      remote1.easydns.com.
dslreports.com.         172800  IN      NS      remote2.easydns.com.
dslreports.com.         172800  IN      NS      ns6.easydns.net.

Doesn't look like very much redundancy to me.  Grouped by netblock:

ns1.easydns.com has address 64.68.192.10
remote1.easydns.com has address 64.68.192.10

ns2.easydns.com has address 72.52.2.1
remote2.easydns.com has address 72.52.2.1
ns6.easydns.net has address 72.52.2.1

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                   Mountain View, CA, US |
| Making life hard for others since 1977.               PGP 4BD6C0CB |