Tag Info

New answers tagged

5

That's completely up to your provider, and ultimately, your selection of a provider. Any shared platform carries risks of your neighbors on the platform causing problems for you. In the case of a DDoS, the shared network infrastructure they're using was probably overrun. Ideally, they would work with their upstream ISPs to drop the traffic before it ...


0

With DNS servers (indeed any type of server) sometimes you need to look at and analyse the requests that are being made of it in case a misconfiguration (possibly elsewhere) is amplifying request volume (see for example Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response). Look at the proportions of queries and responses ...


7

On Serverfault, we usually tell you that we can't help with your capacity planning. This is for good reason: we don't know the specifics of your environment, and the answers on how to measure it are pretty much the same. Unfortunately, DNS capacity measurement is a poorly understood topic and most admins will assume that high CPU usage means that it's time ...


1

No as the registrar is not reachable (as dnssimple is ddos), as it hold your dns entry. You cant change the nameserver


1

If you have no access at all to your existing DNS provider, your only option would be to delegate the domain to new nameservers through your registrar. But there would be a propagation delay for that. You might as well do this and you can always switch it back later. I'd recommend you try out Cloudflare. They have free DNS hosting and will duplicate the ...


2

Amazon now make available a complete list of their IP address blocks in JSON format here: https://ip-ranges.amazonaws.com/ip-ranges.json. You can use that to create rules to block all of those addresses. How you do that will depend on exactly how your website is set up, but it would be a lot easier if you had your own server or virtual server that you could ...



Top 50 recent answers are included