IntrusionCM

3y

DNS is everywhere.

I hate DNS.

I hate DNS migrations.

I hate having a hundred plus DNS names inside my brain.

I hate resolving issues.

I hate DNSSEC.

I hate CNAMES.

I hate services which cannot be persuaded to stop trying AAAA resolves first.

I hate the fucking stupid braindead idea to use TXT as a configuration store inside DNS... And thus the necessity to blow up DNS query size aka EDNS.

I really really really really really want to burn this whole mfucking shit down...

rant

the forbidden and cursed lovecraft invention

Ranter

Comments

4

asgs

11275

3y

"what do you propose?"

"It is simple. We kill DNS"
2

IntrusionCM

14751

3y

@asgs that would be marvelous.

Or at least break it down to simple A / AAAA / SOA / MX record plus PTR.
0

darkwind

1492

3y

I just control DNS with terraform in Cloudflare and did not really have any issues
3

Oktokolo

12071

3y

Did you already hardened your DNS against it being used as a mirror for reflection attacks?
2

IntrusionCM

14751

3y

@Oktokolo yeah... It's mostly internal, but yes.

Unbound / NSD ftw.
0

ScribeOfGoD

7271

3y

@Oktokolo more information?
2

IntrusionCM

14751

3y

@ScribeOfGoD

https://cloudflare.com/learning/...

EDNS and it's increase of possible payload made amplification/ mirror attacks pretty evil.

Not only becomes the quantity of requests a problem, but the bandwidth, too.

I think it was 4 kb for EDNS... Not much, unless you use amplification / mirroring...

Then the jump from 0.5 kb to 4 kb really hurts.

devRant © 2021 Hexical Labs LLC
Privacy Policy | Terms of Service