Conversation

Notices

1. Embed this notice
   Paul_IPv6 (paul_ipv6@infosec.exchange)'s status on Friday, 17-Nov-2023 14:51:21 JST Paul_IPv6

   in reply to

   • Mark Nottingham
   • Christian Huitema

   @mnot @huitema

   there are automation/ease advantages in having your cloud provider be your DNS provider.

   it does lock you into their automation and any stupid DNS tricks that aren't RFC standards but do "work" in that environment.

   robustness/resiliency does suffer a bit, in that you have both DNS and hosting fail with a provider failure. web browsers and apps will give a different user experience/error if you can resolve the DNS name but be unable to get a working IP connection vs having DNS just SERVFAIL.

   i do see more web/app folks that don't really understand DNS at all go for this all-in-one and who don't always understand what tradeoffs they are then living with.

   • feld likes this.
   • Embed this notice
     Mark Nottingham (mnot@techpolicy.social)'s status on Friday, 17-Nov-2023 14:51:22 JST Mark Nottingham

     in reply to

     • Christian Huitema

     @huitema so, what does this mean? Is it bad, and if so, why - considering that people can move dns hosts easily (because it is reasonably interoperable) and the dns system is resilient to failures? I’m concerned about concentration and centralization, but in markets where there are multiple providers, low barriers to switching and efficiencies of scale, it’s hard for me to be as concerned as much as I am about other ones that don’t have these features.

   • Embed this notice
     Christian Huitema (huitema@social.secret-wg.org)'s status on Friday, 17-Nov-2023 14:51:36 JST Christian Huitema

     For a couple of years now, I have been working with Alain Durand at ICANN to collect statistics in DNS usage, patterns, etc. Data is updated monthly. Latest addition is a table of the concentration of DNS name servers, measured by looking at where the IP addresses of the servers are hosted. The big "winner" is of course Cloudflare, but there is also a significant correlation between being hosted by AWS or served by Akamai and have the DNS on the same network.
     https://ithi.research.icann.org/graph-m9.html