InfoQ Homepage DNS Content on InfoQ
-
Mitmproxy 11 Released: Full HTTP/3 Support and DNS Enhancements
Mitmproxy released version 11, introducing some upgrades, including full support for HTTP/3 in both transparent and reverse proxy modes. Alongside the HTTP/3 advancements, this release brings a range of DNS-related improvements, enhanced privacy features, and better handling of modern web protocols.
-
Slack Migrates to Cell-Based Architecture on AWS to Mitigate Gray Failures
Slack migrated most of the critical user-facing services from a monolithic to a cell-based architecture over the last 1.5 years. The move was triggered by the impact of networking outages affecting a single availability zone, causing user-impacting service degradation. The new architecture allows incrementally draining all the traffic away from the affected availability zone within 5 minutes.
-
Amazon Route 53 Resolver Introduces DNS over HTTPS Support for Enhanced Security and Compliance
AWS recently announced that Amazon Route 53 Resolver will support using the Domain Name System (DNS) over HTTPS (DoH) protocol for both inbound and outbound Resolver endpoints.
-
AWS Introduces Amazon Route 53 Resolver on AWS Outposts Rack
AWS recently announced that Amazon Route 53 Resolver is now available on AWS Outposts rack providing on-premises services and applications with local Domain Name Service (DNS) resolution directly from Outposts. In addition, local Route 53 Resolver endpoints also enable DNS resolution between Outposts and on-premises DNS servers.
-
AWS Introduces IP-Based Routing on Route 53
AWS recently announced support for IP-based routing on Amazon Route 53. The new option of the DNS service allows customers to route resources of a domain based on the client subnet to optimize network transit costs and performance.
-
Microsoft Releases Azure DNS Private Resolver in Public Preview
Azure DNS Private Resolver is a new service that enables customers to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM-based DNS servers. This new service is fully-managed in Azure and in public preview.
-
New Side-Channel Vulnerability in the Linux Kernel Enabling DNS Cache Poisoning
A recent research paper by a team at University of California, Riverside, shows the existence of previously overlooked side channels in the Linux kernels that can be exploited to attack DNS servers.
-
AWS Releases Amazon Route 53 Application Recovery Controller into General Availability
Recently, AWS announced the general availability (GA) of Amazon Route 53 Application Recovery Controller, an additional new set of capabilities in Amazon Route 53. With the capabilities, it will be easier for customers to continuously monitor their applications’ ability to recover from failures and control their recovery across AWS Regions, Availability Zones, and on-premises infrastructure.
-
Istio 1.8 Announces Smart DNS Proxy, Support for Helm 3
Istio recently announced the release of Istio 1.8. The fourth and final release for the open-source service mesh platform in 2020, this release focused on support for multi-cluster meshes and virtual machine (VM) workloads.
-
How SAD DNS Works
SAD DNS is a new variant of DNS cache poisoning that allows an attacker to inject malicious DNS records into a DNS cache, thus redirecting any traffic to their own server and become a man-in-the-middle (MITM).
-
DNSSEC Root KSK Ceremony 41 Taking Place on Thursday
The DNSSEC signing ceremony, which takes place as an in-person event every three months, will be a combined physical and virtual event on Thursday at 17:00 UTC. The next few months' signing keys for the DNSSEC root nameservers will take place, but not all of the keyholders will be physically present due to travel restrictions caused by COVID-19. Find out how the ceremony has been adapted.
-
DNSSEC Signing Potentially Interrupted by Coronoavirus
The DNSSEC signing process, which has happened every three months for the last ten years, is likely to be unable to happen due to travel restrictions caused by Coronavirus. Read on to find out what the problems are, and how they plan on keeping DNSSEC running after summer 2020.
-
Network Automation at Fastly
Ryan Landry, the senior director for TechOps at Fastly, has shared how network automation enables them to manage traffic peaks during popular live-streamed events such as the Super Bowl LIV. Fastly is directly connected to numerous ISPs across the US and tries to keep their live video traffic on these direct paths with their partners to deliver video streams as close to the end-user as possible.
-
DNS Solution CoreDNS Graduates from the Cloud Native Computing Foundation
CoreDNS, a cloud-native DNS server commonly used for dynamic DNS-based service discovery, has become the first Cloud Native Computing Foundation (CNCF) project to graduate in 2019.
-
Google Announces Cloud DNS Forwarding
In a recent blog post, Google has announced Cloud DNS forwarding, allowing resources, both in the cloud and on-premises, to find each other through DNS. These capabilities deliver the option to either implement Google DNS or one’s private authoritative server as a DNS provider.