plagiat0r

5 ms·

31.
by plagiat0r 2y ago
Is there a way to submit a tool without registering? I would like to add offline browser jpeg resizer and minimizer https://squoosh.app/
32.
by plagiat0r 2y ago
Thanks. It seems they started to filter UserAgents, because it indeed renders with Firefox Android, but not with Samsung browser, filtered UA is: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBro
33.
Ask HN: Distrowatch.com returns HTTP/403? Did they shutdown?
2 points by plagiat0r 2y ago|2 comments
34.
by plagiat0r 2y ago
A bold hypothesis. The problem is, nowhere in the tcp handshake you will find the string, a.k.a fqdn. And one IP can host hundreds of fqdns. No way MacOS parse tls clienthello looking for SNI. Also I doubt a DNS resolver runs in the Mac ker
35.
by plagiat0r 2y ago
I've implemented a custom powerdns backend that combines heathchecks, weighted probabilistic round robin, and geo DNS and it works excellent to build and auto healing CDN. It was specifically built for multi DC or multi cloud or hybrid
36.
by plagiat0r 2y ago
But this does not make sense. How Mac operating system resolver are supposed to test the latency of (A)ddress records? Browser use this network address to actually make a tcp connection on 443 and measure latency here. Or udp/443 when
37.
by plagiat0r 2y ago
Excellent article. I would add two things: Negative DNS responses are possible in two forms: 1. nxdomain and a 2. NODATA response. They both mean that a DNS record is not found but they have different scope. NODATA response rcode is NoError
38.
by plagiat0r 2y ago
Thanks for sharing, albeit this is an old article, from 2021. The end result is very similar to even an older concept defined in RFC2317, but here instead of creating 256 cname records, one dname that causes cname to be synthetized.
39.
by plagiat0r 2y ago
That is an excellent tool, thank you for sharing.
40.
by plagiat0r 2y ago
I'm using gkg.net, ovh and Google cloud domains as registrars, depending on the gTLD. As for authoritative DNS, I'm hosting my own solution based on powedns, custom backend, and route53 + Google Cloud DNS, evaluating Bunny DNS as
41.
by plagiat0r 2y ago
Author asked about authoritative DNS servers used to serve purchased domains, not recursive DNS resolvers.
42.
by plagiat0r 2y ago
https://www.registry.google/register-a-domain/ There are a few registrars that can be used. I wish this list be bigger, but it's not only squarespace.
43.
by plagiat0r 2y ago
Migrate to gkg.net with your domains, transfer them asap
44.
by plagiat0r 2y ago
I hope you sue squarespace for damages. Registrars are disgrace these days, disabling your domains with clientHold, etc. Cloudflare is no better, bans their customers including their DNS. Host DNS yourself, always. But it won't help fo
45.
by plagiat0r 2y ago
The response from bind is not great. Sure, one individual bind resolver may have lower amplification factor with those rate limits, but it is much more than 1x. As a consequence, 100k of such resolvers could do a burst that could saturate t
46.
by plagiat0r 2y ago
Whatever is hosted on the domain, registrar should never intervene without a court order. This is beyond comprehension how registrars are abusing their clients.
47.
by plagiat0r 2y ago
It would be great to not listen on tcp/80 for your API, except that acme http-01 uses tcp/80 explicitly for domain validation. So in order to get https, you open http. Sure, there is dns-01 and tls-alpn-01 but I presume that major
48.
by plagiat0r 2y ago
The biggest issue here is a total lack of monitoring of root zone sync among all 1840+ root server instance, where an issue is detected accidentally by a random dude. Huge oversight from ICAAN and ARIN. I know they are behind anycast, but e
49.
by plagiat0r 2y ago
Of course I run my DNS servers, actually I run powerdns and my custom pipe backend with very advanced geodns capabilities, aliases, load balancing, health checks, etc. This is private backend, not open source. It cost me four virtual machin
50.
by plagiat0r 2y ago
Is this somewhat compatible with other proposals, like haproxy or ietf? https://www.haproxy.com/blog/announcing-haproxy-2-9#reverse-... https://datatracker.ietf.org/doc/draft-bt-httpbis-reverse-ht.
51.
by plagiat0r 2y ago
Thank you for this post. Not sure why DNS is not very popular among this community, but I love any related DNS submits, especially any new proposals to solve current DNS pains. This DELEG proposal is very interesting and deserve a better co
52.
by plagiat0r 2y ago
People should run their own authoritative DNS servers and use an external registrar. So many times those big companies nuke a customer entirely, including a dns and you're offline for few days.
53.
by plagiat0r 2y ago
O lot of companies actually migrate back to onpremise. Modern CPU and high memory servers are cheaper than ever, while cloud bill for compute are going slightly up, with a tremendous fees for network traffic.
54.
by plagiat0r 2y ago
Transfer domains ASAP, there are 2800+ icaan registrars, I use gkg.net. Fill the complain to icaan about cloudflare. A civil case is also possible. And host your DNS using multiple cheap vms using multiple companies + power DNS. If you don&
55.
by plagiat0r 3y ago
I love how simple and elegant is this to use: https://github.com/tidwall/neco/blob/main/examples/echo-serv... I was going to actually implement an echo server for load balancer health checks with mi
56.
by plagiat0r 3y ago
But isn't the whole point of IX and IX route servers to openly peer with every IX members automatically, instead of doing individual private peeing with each member? This looks like a step back to introduce some extra policies and indi
57.
by plagiat0r 3y ago
While it is simple to blame Google for traffic surge, the thing is that I have them on my RSS reader for years and I barely visit the site even once a month. Articles are not interesting to me at large, 99.9% of the time, there is no commen
58.
Google plans to stop announcing BGP routes at IX(twitter.com)
15 points by plagiat0r 3y ago|3 comments
59.
by plagiat0r 3y ago
It appears that Google will no longer open peering with IX members, not sure if this is global or only for certain IX.
60.
by plagiat0r 3y ago
I have it in bookmarks already, albeit with iconbuddy.app fqdn where it claimed 100k open source icons. We have a .com domain now and double the icon count, congratulations.

More ›