11 ms·
The TTL for the glue records of a .com domain is 48 hours, so even if you have Route53 set up and ready to go, it takes a long time to switch the zone away from
by ljosa 10y ago
The TTL for the glue records of a .com domain is 48 hours, so even if you have Route53 set up and ready to go, it takes a long time to switch the zone away from Dyn.
We switched from Dyn to Rout53 a few weeks ago. It took about 12 hours before half of the traffic had shifted over.
- 6d6b73 10y agoThat's the reason to have your DNS at at least two different companies, working in tandem. In a case where one is down, your Unicorn Corp doesn't go down with it.
- St-Clock 10y agoHow does that work in practice? Even if I set NS records pointing to two different DNS providers, I don't think a DNS client would automatically switch and retry if one is too slow to respond/times out.
- 6d6b73 10y agoWhy not? That's the whole idea behind having more than one NS server isn't it?
- acdha 10y agoMost DNS resolvers will automatically try each NS record until they get a response. That might be your ISP rather than your iPhone but that's an old practice going back to when the internet was even less reliable because some random Sun box under someone's desk failed. Modern web browsers will also do the same thing if a query returns multiple A records and they get a connection error.
- acdha 10y agoExactly: there's nothing wrong with only using one provider if you're not willing to pay for two services but if you can't afford downtime you really need active diversity all the way down. Route53 uses a bunch of different top-level domains for the same reason – if someone does manage to take the .com servers offline you'll be glad .co.uk is run by a separate organization.
- tuke 10y agoN.b., unless things have changed, I don't think Dyn (for one) allows secondary DNS. Maybe that has changed. {?}