Hacker News new | ask | show | jobs
by rbinv 3535 days ago
Please. Dyn has performed pretty well in the past, and any other provider (be it UltraDNS, CloudFlare or anybody else) would be a single point of failure as well.

As you said, the only protection (somewhat) is to have redundant/multiple DNS providers. Doesn't mean Dyn can't be one of many.
2 comments
Bartweiss 3534 days ago
Dyn is still one of the biggest and hardest to hit providers, so I'd be surprised if they're broadly abandoned. Redundant providers are pretty much the only fix available to users, but it's still sensible to be redundant via the the best providers out there, and that still means Dyn.
link
Animats 3535 days ago
They had one job. To stay up no matter what. That's the only justification for using Dyn. They failed.
link
rbinv 3535 days ago
Yes, they did. But, depending on the details of the attack, I am not sure if any other provider could have withstood the attack without problems. In other words, I doubt there's a single provider/alternative.
link
detaro 3534 days ago
Unless you have a good argument why they are less likely to stay up than the alternatives, I don't see how this would lead to their end. Unless you take it as an argument to abolish ALL DNS servers and start mailing host-files around...

People have been painfully reminded why using multiple providers is best practice, will re-evaluate if that's worth the expense and if yes add other servers. Dyn will easily survive unless some massive blunder is exposed in the aftermath.

link
meira 3534 days ago
The alternative, not being one of the bigs, has a lot less chance to be hit. I would leave dyndns the same way I'm leaving cloudflare.
link
a3n 3534 days ago
No matter what is pretty tough. And it's not like they're an insurance company that can re-insure their risks.

The people who depend on DNS have one DNS-related job: to mitigate risk relative to their potential losses and existence.

link
Bartweiss 3534 days ago
Would anyone else have stayed up, though? This isn't just going to be a fear response, the risk assessment will be to ask "what could have prevented this?"

Lots of people will quit using Dyn as a sole DNS, but I don't see any reason they'll quit being involved in people's multiple DNS solutions.

link