InfoQ Homepage DNS Content on InfoQ
-
AWS Introduces Amazon Route 53 Resolver on AWS Outposts Rack
AWS recently announced that Amazon Route 53 Resolver is now available on AWS Outposts rack providing on-premises services and applications with local Domain Name Service (DNS) resolution directly from Outposts. In addition, local Route 53 Resolver endpoints also enable DNS resolution between Outposts and on-premises DNS servers.
-
AWS Introduces IP-Based Routing on Route 53
AWS recently announced support for IP-based routing on Amazon Route 53. The new option of the DNS service allows customers to route resources of a domain based on the client subnet to optimize network transit costs and performance.
-
Microsoft Releases Azure DNS Private Resolver in Public Preview
Azure DNS Private Resolver is a new service that enables customers to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM-based DNS servers. This new service is fully-managed in Azure and in public preview.
-
New Side-Channel Vulnerability in the Linux Kernel Enabling DNS Cache Poisoning
A recent research paper by a team at University of California, Riverside, shows the existence of previously overlooked side channels in the Linux kernels that can be exploited to attack DNS servers.
-
AWS Releases Amazon Route 53 Application Recovery Controller into General Availability
Recently, AWS announced the general availability (GA) of Amazon Route 53 Application Recovery Controller, an additional new set of capabilities in Amazon Route 53. With the capabilities, it will be easier for customers to continuously monitor their applications’ ability to recover from failures and control their recovery across AWS Regions, Availability Zones, and on-premises infrastructure.
-
Istio 1.8 Announces Smart DNS Proxy, Support for Helm 3
Istio recently announced the release of Istio 1.8. The fourth and final release for the open-source service mesh platform in 2020, this release focused on support for multi-cluster meshes and virtual machine (VM) workloads.
-
How SAD DNS Works
SAD DNS is a new variant of DNS cache poisoning that allows an attacker to inject malicious DNS records into a DNS cache, thus redirecting any traffic to their own server and become a man-in-the-middle (MITM).
-
DNSSEC Root KSK Ceremony 41 Taking Place on Thursday
The DNSSEC signing ceremony, which takes place as an in-person event every three months, will be a combined physical and virtual event on Thursday at 17:00 UTC. The next few months' signing keys for the DNSSEC root nameservers will take place, but not all of the keyholders will be physically present due to travel restrictions caused by COVID-19. Find out how the ceremony has been adapted.
-
DNSSEC Signing Potentially Interrupted by Coronoavirus
The DNSSEC signing process, which has happened every three months for the last ten years, is likely to be unable to happen due to travel restrictions caused by Coronavirus. Read on to find out what the problems are, and how they plan on keeping DNSSEC running after summer 2020.
-
Network Automation at Fastly
Ryan Landry, the senior director for TechOps at Fastly, has shared how network automation enables them to manage traffic peaks during popular live-streamed events such as the Super Bowl LIV. Fastly is directly connected to numerous ISPs across the US and tries to keep their live video traffic on these direct paths with their partners to deliver video streams as close to the end-user as possible.
-
DNS Solution CoreDNS Graduates from the Cloud Native Computing Foundation
CoreDNS, a cloud-native DNS server commonly used for dynamic DNS-based service discovery, has become the first Cloud Native Computing Foundation (CNCF) project to graduate in 2019.
-
Google Announces Cloud DNS Forwarding
In a recent blog post, Google has announced Cloud DNS forwarding, allowing resources, both in the cloud and on-premises, to find each other through DNS. These capabilities deliver the option to either implement Google DNS or one’s private authoritative server as a DNS provider.
-
Scaling Global Traffic at Dropbox with Edge Locations and GSLB
The Dropbox engineering team shared their experience of architecting and scaling their global network of edge locations. Located around the globe, these run a custom stack of nginx and IPVS and connect to the Dropbox backend servers over their backbone network. A combination of GeoDNS and BGP Anycast ensures availability and low latency for end users.
-
GitHub Engineering Adopts New Architecture for MySQL High Availability
Github.com uses MySQL as a backbone for many of its critical services like the API, authentication and the Github.com website itself. Github’s engineering team replaced its previous DNS and VIP based setup with one based on Orchestrator, Consul and the Github Load Balancer to get around split brain and DNS caching issues.
-
Monitoring Cloudflare's Global Network Using Prometheus
Matt Bostock’s SRECON 2017 Europe talk covers how Prometheus, a metric-based monitoring tool, is used to monitor CDN, DNS and DDoS mitigation provider CloudFlare’s globally distributed infrastructure and network.