3 ms·
It (either SRV or HTTPS/SVCB) solves two significant problems: It makes web serving as robust as SMTP, with official fallback servers listed in the DNS. This
by teddyh 4y ago
It (either SRV or HTTPS/SVCB) solves two significant problems:
It makes web serving as robust as SMTP, with official fallback servers listed in the DNS. This makes most uses of CDNs or DDoS protection services unnecessary, as you can just spin up N different servers and list them all in the DNS. No need to centralize everything behind Cloudflare or Google.
It also solves the “apex delegation” problem; i.e. the problem of having to hard-code the IP address or addresses of a service at the apex domain name (i.e. on example.com instead of on www.example.com), without even having a CNAME, making you having to change that IP address on all domains using that web service whenever that service changes it IP address. (So-called “ALIAS” DNS records are fake; they are an ugly hack which does the aforementioned changing of IP addresses automatically.)
These two are what I personally consider the most important ones, but there are more:
https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-https-11#section-1.1 https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-...
- bawolff 4y ago> It makes web serving as robust as SMTP, with official fallback servers listed in the DNS. This makes most uses of CDNs or DDoS protection services unnecessary, as you can just spin up N different servers and list them all in the DNS. No need to centralize everything behind Cloudflare or Google. There are lots of load balancing solutions that are really well developed. I think most people use cloudflare because its really easy, and (the probably misguided notion) that shaving a few ms via georeplication is worth it . And for some users, fear of a volumetric DoS that just totally saturates the network link. I feel like the type of people who would be content with the load balancing offered by SRV are probably already using load balancing on some other layer, e.g. LVS or HAproxy.
- marcosdumay 4y agoThe problem CDNs solve can simply not be solved at protocol-level load balancing. And yes, when people talk about DDoS mitigation, they are talking about a volumetric DoS that saturates their network link.