From 3e83a104cd912c3e137952950ea98558cb766fed Mon Sep 17 00:00:00 2001 From: Brian Cunnie Date: Sun, 17 Jul 2022 18:51:53 -0700 Subject: [PATCH] Warning: our nameservers don't replace `8.8.8.8` MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Some people may think that these are public recursive name servers; they're not. We warn them. Drive-by: "nameserver" → "name server" --- k8s/document_root_sslip.io/index.html | 30 ++++++++++++++++----------- 1 file changed, 18 insertions(+), 12 deletions(-) diff --git a/k8s/document_root_sslip.io/index.html b/k8s/document_root_sslip.io/index.html index 37c2428..a89fe9e 100644 --- a/k8s/document_root_sslip.io/index.html +++ b/k8s/document_root_sslip.io/index.html @@ -113,10 +113,11 @@ src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"> own the domain “example.com”, and you want your subdomain, “xip.example.com” to have xip.io-style features. To accomplish this, set the following three DNS servers as NS records for the subdomain “xip.example.com”

@@ -196,8 +197,8 @@ dig @ns.sslip.io txt ip.sslip.io +short # sample reply "2607:fb90:464:ae1e:ed dig @ns.sslip.io txt ip.sslip.io +short -4 # forces IPv4 lookup; sample reply "172.58.35.231" dig @ns.sslip.io txt ip.sslip.io +short -6 # forces IPv6 lookup; sample reply "2607:fb90:464:ae1e:ed60:29c:884c:4b52"

This feature was inspired by Google's DNS lookup, i.e. dig txt o-o.myaddr.l.google.com @8.8.8.8 +short. There are also popular HTTP-based services for determining your public IP address:

@@ -307,7 +308,7 @@ dig @ns-aws.sslip.io metrics.status.sslip.io txt +short
This consists of two numbers; the first is the number of responses to IPv4 PTR queries (1.0.0.127.in-addr.arpa. → 127-0-0-1.sslip.io.), the second, IPv6 PTR queries
NS DNS-01
-
The number of responses which included a delegation of the NS (nameserver) to satisfy a certificate +
The number of responses which included a delegation of the NS (name server) to satisfy a certificate authority's DNS-01 challenge. This lookup is used for generating wildcard certificates from Let's Encrypt and other certificate authority. Technically this is not a "successful" query in that we don't return a record in the ANSWER section, but we do return an NS record in the AUTHORITY section. (e.g. "dig @ns-gce.sslip.io @@ -333,14 +334,14 @@ dig @ns-aws.sslip.io metrics.status.sslip.io txt +short

[Status] A status of “build failing” rarely means the system is failing. It’s more often an indication that when the servers were last checked (currently every six hours), the CI (continuous integration) server had difficulty reaching one of - the three sslip.io nameservers. That’s normal. [connection timed + the three sslip.io name servers. That’s normal. [connection timed out]

[connection timed out]

DNS runs over UDP which has no guaranteed delivery, and it’s not uncommon for the packets to get lost in transmission. DNS clients are programmed to - seamlessly query a different server when that happens. That’s why DNS, by fiat, requires at least two nameservers - (for redundancy). From IETF (Internet Engineering Task Force) RFC - (Request for Comment) 1034:

+ seamlessly query a different server when that happens. That’s why DNS, by fiat, requires at least two name + servers (for redundancy). From IETF (Internet Engineering Task + Force) RFC (Request for Comment) 1034:

A given zone will be available from several name servers to insure its availability in spite of host or communication link failure. By administrative fiat, we require every zone to be available on at least two @@ -379,6 +380,11 @@ Placed at the end of the document so the pages load faster --> '//www.google-analytics.com/analytics.js', 'ga'); ga('create', 'UA-43107212-2', 'auto'); ga('send', 'pageview'); - + About HTML Tidy: https://github.com/htacg/tidy-html5 Bug reports and comments: + https://github.com/htacg/tidy-html5/issues Official mailing list: https://lists.w3.org/Archives/Public/public-htacg/ + Latest HTML specification: http://dev.w3.org/html5/spec-author-view/ Validate your HTML documents: + http://validator.w3.org/nu/ Lobby your company to join the W3C: http://www.w3.org/Consortium Do you speak a language + other than English, or a different variant of English? Consider helping us to localize HTML Tidy. For details please + see https://github.com/htacg/tidy-html5/blob/master/README/LOCALIZE.md