Hacker News with Generative AI: DNS

DNSanity: Quickly validate DNS servers at scale (github.com/nil0x42)
DNSanity is a fast DNS resolvers validator, offering deep customization and reliable concurrency.
DNS, Networking, Tools, Security
18 points by nil0x42 4 days ago | 0 comments
RethinkDNS Resolver That Deploys to CF Workers, Deno Deploy, Fastly, Fly.io (github.com/serverless-dns)
serverless-dns is a Pi-Hole esque content-blocking, serverless, stub DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) resolver.
DNS, Security, Serverless, Cloud Computing, Open Source
105 points by indigodaddy 6 days ago | 20 comments
Using CAA Records with Namecheap (aaronmdjones.net)
I'm getting tired of having to explain to DNS registrars (and even a DNS registry, once) how DNS works -- knowing this is literally their entire job, and yet this will be my sixth time doing so. But first, some context.
DNS, Domain Names, Web Hosting
19 points by aaronmdjones 21 days ago | 12 comments
DNS Blackhole (AS112) Service (iana.org)
Domain Name System resolvers can erroneously perform DNS lookups associated with private-use IP addresses, which generates a significant amount of undesirable Internet traffic. To combat this, a number of "blackhole" or "sinkhole" DNS servers exist to capture this traffic and reduce the load of DNS lookups.
DNS, Security, Network Traffic, Internet
6 points by mparkms 22 days ago | 0 comments
macOS Sends Locally-Served DNS Zones to iCloud Private Relay (apple.com)
My laptop (M1 Pro, macOS 15.3.2) is connected to a dual stack network via Wi-Fi. The home.arpa. domain is supplied as a search domain via both DHCPv4 (options 15 and 119) and DHCPv6 (option 24). "Details…" for the network connection in System Settings show this domain under the DNS tab.
macOS, DNS, Privacy, iCloud, Security
11 points by Kentzo 25 days ago | 2 comments
Show HN: godns A DNS forwarder similar to dnsmasq (github.com/nodesocket)
DNS, Networking, Open Source, Tools
5 points by nodesocket 28 days ago | 2 comments
Is BIND9 suitable as a recursive resolver in 2025? (szafka.net)
Recently, we have been engaged in consulting work and providing DNS training for a major IT corporation, boasting an employee count exceeding 10,000. Thankfully, not every staff member attended the course.
DNS, Networking, Security, Technology
22 points by plagiat0r 39 days ago | 7 comments
HTTPS RR in Curl (haxx.se)
RFC 9460 describes a DNS Resource Record (RR) named HTTPS. To highlight that it is exactly this DNS record called HTTPS we speak of, we try to always call it HTTPS RR using both words next to each other.
HTTPS, DNS, Security, Networking
58 points by TangerineDream 39 days ago | 12 comments
.arpa, rDNS and a few magical ICMP hacks (sdomi.pl)
Through Project SERVFAIL, I became aware that there are a few individuals, not just ISPs, who host their own in-addr.arpa. and ip6.arpa. zones. It never occurred to me that I could ask bgp.wtf, my beloved ISP, to delegate me a zone like this - until one faithful late-night chat.ARPA zones are usually totally out of reach for individuals, so I was absolutely hyped when one of our netadmins agreed to delegate me the ip6.arpa. zone for my whole /48 IPv6 range.
Networking, DNS, Security, Reverse DNS
7 points by todsacerdoti 40 days ago | 0 comments
iCloud Mail has DNS misconfigured? (mail-tester.com)
Good stuff. Your email is almost perfect
iCloud, Email, DNS, Security
180 points by wildekek 41 days ago | 87 comments
Quad9 – A public and free DNS service for a better security and privacy (quad9.net)
Quad9 is a free service that replaces your default ISP or enterprise Domain Name Server (DNS) configuration.
Security, Privacy, DNS, Internet
63 points by janandonly 45 days ago | 30 comments
DNS Speed Test (dnsspeedtest.online)
Optimize your internet experience by finding the fastest DNS server for your location. Just click the button below to start the test.
Internet, DNS, Optimization, Tools
41 points by tosh 45 days ago | 10 comments
Understanding DNS Resolution on Linux and Kubernetes (jpetazzo.github.io)
I recently investigated a warning message on Kubernetes that said: DNSConfigForming ... Nameserver limits were exceeded, some nameservers have been omitted. This was technically a Kubernetes event with type: Warning, and these usually indicate that there’s something wrong, so I wanted to investigate it.
Linux, Kubernetes, DNS, Troubleshooting, Network
74 points by fanf2 47 days ago | 33 comments
Italy demands Google poison DNS under strict Piracy Shield law (arstechnica.com)
Italy is using its Piracy Shield law to go after Google, with a court ordering the Internet giant to immediately begin poisoning its public DNS servers.
Law, Google, Italy, Piracy, DNS
176 points by DanAtC 48 days ago | 171 comments
Italian Court Orders Google to Poison Public DNS to Prevent IPTV Piracy (torrentfreak.com)
A decision issued by the same court now requires Google to poison its Public DNS to prevent access to pirate sites.
IPTV, Piracy, Law, Italy, DNS
19 points by DanAtC 49 days ago | 2 comments
More mysterious DNS root query traffic from a large cloud/DNS operator (2022) (apnic.net)
With so much traffic on the global Internet day after day, it’s not always easy to spot the occasional irregularity.
Internet, DNS, Security, Networking, Cloud Computing
75 points by mooreds 59 days ago | 15 comments
Kubernetes Home – what do you do if your ISP changes your IP addresses? (priv.no)
In my last blog post I described external-DNS, which is a way to have Kubernetes create and update DNS entries for its services. But as I mentioned, it got me thinking a bit on ways to extend this concept to handle other external aspects of my Kubernetes environment.
Kubernetes, DNS, Networking, Cloud Computing
49 points by jandeboevrie 61 days ago | 101 comments
NIH.gov DNS servers down, making PubMed, BLAST, etc. unreachable [fixed] (nslookup.io)
NIH, DNS, Downtime, Medical Research, Science
494 points by raphman 68 days ago | 385 comments
DNS Nerds Don't Control the Internet (2016) (sockpuppet.org)
You’re reading this page because you’ve suggested that “14 people control the Internet through the DNSSEC root keys”. If you’re unlucky, you might be a journalist preparing a story about those people. Stop!
DNS, Security, Internet, Journalism
18 points by wglb 71 days ago | 7 comments
An illustrated guide to the Kaminsky DNS vulnerability (2008) (unixwiz.net)
The big security news of Summer 2008 has been Dan Kaminsky's discovery of a serious vulnerability in DNS. This vulnerability could allow an attacker to redirect network clients to alternate servers of his own choosing, presumably for ill ends.
Security, Networking, DNS, Vulnerabilities
25 points by amidtheperf 73 days ago | 6 comments
Zns: CLI tool for querying DNS records with readable, colored output (github.com/znscli)
zns is a command-line utility for querying DNS records, displaying them in a human-readable, colored format that includes type, name, TTL, and value.
DNS, Tools
30 points by bschaatsbergen 76 days ago | 6 comments
I ditched my Pi-hole but still block ads with NextDNS (mattsayar.com)
I love the idea behind the Pi-hole: block ads at the DNS layer so ads never even reach your devices. No ads, no trackers, and no worries about your extensions breaking! Works network-wide! Unfortunately, it caused me more grief than joy.
Advertising, DNS, Software
69 points by MattSayar 79 days ago | 72 comments
Decentralized Naming and Certificate Authority (handshake.org)
Handshake is a decentralized, permissionless naming protocol where every peer is validating and in charge of managing the root DNS naming zone with the goal of creating an alternative to existing Certificate Authorities and naming systems.
Decentralization, Blockchain, DNS, Certificate Authorities, Security
17 points by nkjoep 81 days ago | 1 comments
Hickory DNS Is Moving Toward Production Readiness (memorysafety.org)
The Domain Name System (DNS) is a foundational part of the Internet. It stores data associated with domain names, like web server addresses and mail server addresses. Almost all network connections are preceded by a DNS lookup. The most popular DNS server implementations are written in C, and as a result, they have been affected by a series of memory safety vulnerabilities. These vulnerabilities can put DNS infrastructure at risk, as well as any system that depends on DNS.
Security, DNS, Networking
19 points by ksec 83 days ago | 2 comments
Getaddrinfo sucks. everything else is much worse (gosu.se)
DNS is one of the critical building blocks of the internet and of the modern web. For the longest time the only way for Firefox to resolve a DNS domain was by using getaddrinfo. What's remarkable about this function is that it's implemented on Linux, Windows, MacOS - even Android. It has the same signature, and works in roughly the same way, even though the implementation in these operating systems doesn't share the same code base.
DNS, Networking, Operating Systems, Web Development
34 points by todsacerdoti 91 days ago | 10 comments
Invalid Niger Nameservers in the com zone (0xda.de)
A recent post by Krebs On Security about a mastercard mistake in their nameservers got me thinking. I recently got access to the .com zone file, I could just… grep for this common type of mistake.
Security, DNS, Networking
6 points by mtlynch 106 days ago | 0 comments
Mastercard DNS error went unnoticed for years (krebsonsecurity.com)
The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name.
Cybersecurity, DNS, Mastercard, Security Flaws
1007 points by todsacerdoti 107 days ago | 249 comments
Preventing conflicts in authoritative DNS config using formal verification (cloudflare.com)
Over the last year, Cloudflare has begun formally verifying the correctness of our internal DNS addressing behavior — the logic that determines which IP address a DNS query receives when it hits our authoritative nameserver.
DNS, Formal Verification, Security, Networking, Cloud Computing
64 points by rscho 122 days ago | 3 comments
DNS Nameservers (potaroo.net)
It's common folklore in the Domain Name System that a delegated domain name must be served by 2 or more nameservers.
DNS, Internet
26 points by belter 134 days ago | 5 comments
Breaking down OpenAI's outage: a hidden DNS dependency in Kubernetes (render.com)
OpenAI recently experienced an hours-long, platform-wide outage after a newly-deployed telemetry service overloaded their Kubernetes (K8s) control planes.
OpenAI, Kubernetes, Cloud Computing, DNS, Software
21 points by skywardavocado 142 days ago | 3 comments