HN user

Sevan777

34 karma
Posts8
Comments14
View on HN

That's interesting, I have a WD Black SN850 in my MNT Reform with ZFS on it and luckily haven't run into any issues with it, though I'm not stressing it in any kind of way. WD disks and ZFS go back a long way, when the Green HDD line first showed up in the late 2000s they caused a lot of headaches since ZFS expects to be in control & have a response when issuing requests where as the Green drive's firmware would be trying to conserve power, resulting in bogus errors.

The general advice is that you should have more than 1 name server and they should be on different networks/servers, to prevent the exact issue you're suffering, that a DDoS on one network doesn't cause an entire namespace outage. You are right to think about increasing the TTL of anything that's static and constant, like MX records. That TTL value buys time when there are issues before it is propagated to hosts that need to query your records as it's not cached at their end. Another trick, is to have the authoritative server where you perform the updates not referenced in your domains NS records, and instead only list the secondary (replica) servers in your NS records. So you maintain control and any attack based on NS records is on the replicas, and they refetch the record from the authoritative server periodically (based on SOA record settings).

archive.org is still blocked by 2 mobile telcos https://www.blocked.org.uk/site/http://archive.org It was blocked by more around 2019, including by Three. Had to do the same dance to get restrictions lifted so that I could visit a library, then the rep offered me a special deal on increasing my monthly data transfer quota "for streaming videos". Despite an "unrestricted" account, I still cannot connect to tor bridges and telegram (according to OONI tests https://ooni.org/)

Nice work. :)

I was surprised to learn that systemd will not obtain an address via DHCP without the presence /etc/machine-id which systemd-machine-id-setup creates for you (needs it for IAID+DUID).