4 ms·

Im sure this is bound to end up downvoted because its "user hostile" but in the venerable words of the grey beards, linux is already user friendly, its just pic

Im sure this is bound to end up downvoted because its "user hostile" but in the venerable words of the grey beards, linux is already user friendly, its just picky about its users. replace the word cloud with computer and the cloud argument for fallback evaporates. Cloud has somehow become a surrogate for competent understanding of basic internetworking? cloud-init cant provide a DNS server? provider DHCP isnt a good enough default? Cloud is in this case some premium hand-waving from the systemd community. fallback in itself is a disingenuous offering as it tries to sidestep and clean up some seriously fundamental problems a user might face that they should address before even standing up their microservice or app or whatnot. If you dont have a cogent DNS provider you should stop deploying, not complain loudly and continue merrily on. Google and Cloudflare have on numerous occasions proven they can and will arbitrarily terminate any and all service to a user for any or no reason at all. Cloudflare DoH in particular has open and recurring threads for shadow domain blocks or SRVFAIL they return from their service that are neither announced to users or explained. usbank is a TLD that sees a good deal of quietly planned intervention from the DoH service for some reason.

cmeacham98 6y ago
> Cloudflare DoH in particular has open and recurring threads for shadow domain blocks or SRVFAIL they return from their service that are neither announced to users or explained. usbank is a TLD that sees a good deal of quietly planned intervention from the DoH service for some reason. Could you provide a link or other source for this? I've never heard of this (and can't find anything via google), and I feel like it would be front page news on sites like HN if cloudflare was intentionally providing bad DNS replies. Edit: Nevermind, I've found it - and found out you're basically trolling with that level of misrepresentation: https://community.cloudflare.com/t/servfail-with-u-s-bank-domains/168711/12 https://community.cloudflare.com/t/servfail-with-u-s-bank-do... The issue was: 1. On usbank's side 2. Correctly relayed to the client by cloudflare's DNS rather than lying about the response they got 3. Corrected after cloudflare reached out to usbank to alert them of the mistake
jgrahamc 6y ago
Cloudflare DoH in particular has open and recurring threads for shadow domain blocks or SRVFAIL they return from their service that are neither announced to users or explained. There is no 1.1.1.1 shadowbanning. This is a bunch of crap.
donmcronald 6y ago
> Cloud has somehow become a surrogate for competent understanding of basic internetworking? cloud-init cant provide a DNS server? provider DHCP isnt a good enough default? Exactly. If you can’t deal with basic DNS, that’s a good sign you’re not qualified to manage a bunch of cloud infrastructure.

cmeacham98 6y ago

> Cloudflare DoH in particular has open and recurring threads for shadow domain blocks or SRVFAIL they return from their service that are neither announced to users or explained. usbank is a TLD that sees a good deal of quietly planned intervention from the DoH service for some reason. Could you provide a link or other source for this? I've never heard of this (and can't find anything via google), and I feel like it would be front page news on sites like HN if cloudflare was intentionally providing bad DNS replies. Edit: Nevermind, I've found it - and found out you're basically trolling with that level of misrepresentation: https://community.cloudflare.com/t/servfail-with-u-s-bank-domains/168711/12 https://community.cloudflare.com/t/servfail-with-u-s-bank-do... The issue was: 1. On usbank's side 2. Correctly relayed to the client by cloudflare's DNS rather than lying about the response they got 3. Corrected after cloudflare reached out to usbank to alert them of the mistake

jgrahamc 6y ago

Cloudflare DoH in particular has open and recurring threads for shadow domain blocks or SRVFAIL they return from their service that are neither announced to users or explained. There is no 1.1.1.1 shadowbanning. This is a bunch of crap.

donmcronald 6y ago

> Cloud has somehow become a surrogate for competent understanding of basic internetworking? cloud-init cant provide a DNS server? provider DHCP isnt a good enough default? Exactly. If you can’t deal with basic DNS, that’s a good sign you’re not qualified to manage a bunch of cloud infrastructure.