Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Cloudflare's 1.1.1.1 is down

2»

Comments

  • yoursunnyyoursunny Member, IPv6 Advocate

    We use both Cloudflare DNS and Google DNS, so we are safe.

    Thanked by 2barbarza Carlin0
  • beanman109beanman109 Member, Host Rep, Megathread Squad

    @barbaros said:

    Is that you again biting the cables?

    I am contained within the jar I cannot cause such damage.

  • @JabJab said:

    @Neoon said: I have a premium Ubuiquitypiss Edge Router, which has 3s failover to LTE.

    --

    which has 3s failover to LET.

    My dude, you addicted. Stahp. Enough. 7$ per year deals are not worth premium Router!

    That's not a premium router.

  • @vinhais said:
    Apparently, they suffered a BGP Hijacking with the TATA network.

    https://radar.cloudflare.com/routing/anomalies/hijack-107469

    Fucking Tata.

    Thanked by 1sillycat
  • daviddavid Member

    I switched to running unbound recently. Before that, ControlD over doh.

    Thanked by 1tentor
  • tentortentor Member, Host Rep

    @vinhais said:
    Apparently, they suffered a BGP Hijacking with the TATA network.

    https://radar.cloudflare.com/routing/anomalies/hijack-107469

    It doesn't looks like the cause, however:

    Peers observed: 2%

    Thanked by 3oloke sillycat mp11
  • zedzed Member

    @tentor said:

    @vinhais said:
    Apparently, they suffered a BGP Hijacking with the TATA network.

    https://radar.cloudflare.com/routing/anomalies/hijack-107469

    It doesn't looks like the cause, however:

    Peers observed: 2%

    Caught this on NANOG..

    "The only reason they even appeared is because the actual route announced
    by CF disappeared.
    All 1.1.1.1 related prefixes (v6 included) were withdrawn around the
    same time."

    So it was actually a CF event.. Has CF commented yet? I can't find anything except the radar entry and the original incident report. Super curious what actually happened.

    As always,
    die cloudflare die

    Thanked by 1sillycat
  • DediRockDediRock Member, Patron Provider

    well hopefully it all gets sorted out.

  • zedzed Member
    edited July 2025

    Some more 3rd party chat about it https://anuragbhatia.com/post/2025/07/cloudflare-dns-outage/

    This is also a reminder to various network operators, datacenter and Cloud players - run your own DNS resolvers. There’s no good reason to use 1.1.1.1 or 8.8.8.8 for your customers since there’s no SLA, no contact point involved with Cloudflare or Google. They may go down and worst - they can rate limit you anytime. A couple of unbound instances with anycast within your network can take you very far.

    Amen. Frankly I've always wondered why people were so inclined to feed data on all their internet habits to these corporations when running your own resolver is so ridiculously simple. Mind you he isn't referring to individuals in that comment, but still.

    To his actual point (although again he's really talking about higher up the food chain) when I get a system from a new-to-me provider and see google or cf in resolv.conf I wonder why they're feeding all their customers' dns data to these internet ogres.

    Incompetence or malice? Probably just indifference, but it's a thing I note (much like non-standard v6 assignments).

    Keep it real,
    die cloudflare die

  • They where assigned as best and fastest DNS, so....

  • TimboJonesTimboJones Member
    edited July 2025

    @zed said:

    Some more 3rd party chat about it https://anuragbhatia.com/post/2025/07/cloudflare-dns-outage/

    This is also a reminder to various network operators, datacenter and Cloud players - run your own DNS resolvers. There’s no good reason to use 1.1.1.1 or 8.8.8.8 for your customers since there’s no SLA, no contact point involved with Cloudflare or Google. They may go down and worst - they can rate limit you anytime. A couple of unbound instances with anycast within your network can take you very far.

    Amen. Frankly I've always wondered why people were so inclined to feed data on all their internet habits to these corporations when running your own resolver is so ridiculously simple. Mind you he isn't referring to individuals in that comment, but still.

    To his actual point (although again he's really talking about higher up the food chain) when I get a system from a new-to-me provider and see google or cf in resolv.conf I wonder why they're feeding all their customers' dns data to these internet ogres.

    Incompetence or malice? Probably just indifference, but it's a thing I note (much like non-standard v6 assignments).

    Keep it real,
    die cloudflare die

    Sites visited isn't sharing private data. It wasn't even encrypted until recent security additions in the last decade.

    Trading the sites I visit for a robust and convenient DNS system with no cost to me is fine by me.

    You can live in a world paying by cash or crypto, I'm happy to tap my credit card and get my 2% back. Or sign up for my grocery store to get points. Oh no, they might find out what I like to buy and stock it!

    If you want to rant about stupid Facebook users, though, I won't argue.

  • zedzed Member

    @TimboJones said:

    @zed said:
    Amen. Frankly I've always wondered why people were so inclined to feed data on all their internet habits to these corporations when running your own resolver is so ridiculously simple. Mind you he isn't referring to individuals in that comment, but still.

    Sites visited isn't sharing private data. It wasn't even encrypted until recent security additions in the last decade.

    Trading the sites I visit for a robust and convenient DNS system with no cost to me is fine by me.

    You can live in a world paying by cash or crypto, I'm happy to tap my credit card and get my 2% back. Or sign up for my grocery store to get points. Oh no, they might find out what I like to buy and stock it!

    If you want to rant about stupid Facebook users, though, I won't argue.

    It's not private data but I don't see the point of feeding it directly to the enemy. What's the benefit you get from using 1.1.1.1 or 8.8.8.8? I understand robust (in spite of thread topic :P) but what's convenient about it?

    I don't think I've ever not run my own dns since I first installed slack from floppies, but what's Joe Average getting from using Google's resolvers besides the warm glow of conformity?

    Thanked by 1JohnnySac
  • God i love Quad9, cloudflare as a backup (google is gay). running my own adguard home on a vps is comfy ngl

    Thanked by 1JohnnySac
  • @zed, nothing, just tracking.
    Stay with your own isp dns.

  • Haha I thought it was my internet, I set quad9 as my main dns now

  • zedzed Member

    @NeedDeal said:
    @zed, nothing, just tracking.
    Stay with your own isp dns.

    @zed said: I don't think I've ever not run my own dns since I first installed slack from floppies,

  • I use 9999/8888

  • TimboJonesTimboJones Member
    edited July 2025

    @zed said:

    @TimboJones said:

    @zed said:
    Amen. Frankly I've always wondered why people were so inclined to feed data on all their internet habits to these corporations when running your own resolver is so ridiculously simple. Mind you he isn't referring to individuals in that comment, but still.

    Sites visited isn't sharing private data. It wasn't even encrypted until recent security additions in the last decade.

    Trading the sites I visit for a robust and convenient DNS system with no cost to me is fine by me.

    You can live in a world paying by cash or crypto, I'm happy to tap my credit card and get my 2% back. Or sign up for my grocery store to get points. Oh no, they might find out what I like to buy and stock it!

    If you want to rant about stupid Facebook users, though, I won't argue.

    It's not private data but I don't see the point of feeding it directly to the enemy. What's the benefit you get from using 1.1.1.1 or 8.8.8.8? I understand robust (in spite of thread topic :P) but what's convenient about it?

    I don't think I've ever not run my own dns since I first installed slack from floppies, but what's Joe Average getting from using Google's resolvers besides the warm glow of conformity?

    I'm away in Mexico right now and it appears there was a power outage at my place in Canada. My main PC is on a UPS but didn't come back up.

    Had a hardware fail take out my DNS server, EVERYTHING is fucked, not just one PC.

    Using ISP DNS is horrible. Going to Google or Cloudflare is millions more reliable.

    I don't need to worry about powering two machines, DNS amplification attacks, or opening up to the outside world when I'm not at home or VPN.

    Hardware cost over 25 years: $0
    Man hours installing, patching, upgrading, etc over 25 years: 0

    Can you demonstrate any harm or impact if another company knew the websites you visit? I can't. I know I'll get better targeted ads, which is fine by me. I grew up with commercials on TV with tampon commercials wasting my time. Now ads are tech based, for shit I like.

    But I'm Canadian. If I was an immigrant in the US, I suppose I'd care a lot more, especially with the dirty shit Trump administration does to foreigners (and Rosie) just because he doesn't like you or your sane opinions.

    Thanked by 1sillycat
  • zedzed Member
    edited July 2025

    @TimboJones said:

    @zed said:
    It's not private data but I don't see the point of feeding it directly to the enemy. What's the benefit you get from using 1.1.1.1 or 8.8.8.8? I understand robust (in spite of thread topic :P) but what's convenient about it?

    I don't think I've ever not run my own dns since I first installed slack from floppies, but what's Joe Average getting from using Google's resolvers besides the warm glow of conformity?

    I'm away in Mexico right now and it appears there was a power outage at my place in Canada. My main PC is on a UPS but didn't come back up.

    Had a hardware fail take out my DNS server, EVERYTHING is fucked, not just one PC.

    I don't understand this at all, if you're talking about a resolver and you're not home anyway who cares if PC2 can't resolve netflix.com until you fix it? If you're talking about authoritative servers you probably shouldn't do that at home unless you're being clever.

    (For example, for several years I ran a hidden master on my lan that nsX.he.net pulled data from (and over ipv6 for a static address too!), but even if something happened to my hidden master it would have been weeks before the data served by nsX.he.net went stale.)

    Using ISP DNS is horrible. Going to Google or Cloudflare is millions more reliable.

    It's probably true CF, G, the 9.9.9.9 guys etc are more reliable, and I know some ISPs have tried to do some silly shit in the name of monetization, but I don't think I agree with a blanket "ISP DNS is horrible". That's essentially a meme. The % of people on an internet connection that have specifically switched to using one of those is probably still relatively minor.

    I don't need to worry about powering two machines, DNS amplification attacks, or opening up to the outside world when I'm not at home or VPN.

    Hardware cost over 25 years: $0
    Man hours installing, patching, upgrading, etc over 25 years: 0

    Every freebsd or linux box installation I've done over the last 30ish years has come with a resolver, no extra charge and mostly no extra effort. It's possible they're not a default anymore but I haven't noticed. I certainly have never stood up a box just to run dns at home.

    Can you demonstrate any harm or impact if another company knew the websites you visit? I can't. I know I'll get better targeted ads, which is fine by me. I grew up with commercials on TV with tampon commercials wasting my time. Now ads are tech based, for shit I like.

    My question was what's the benefit, I never made any claim of harm or impact. Again, I see no point in giving them extra info about me without some benefit in return. I mean, I still might not do it because ornery and stubborn but whatever.

    But I'm Canadian. If I was an immigrant in the US, I suppose I'd care a lot more, especially with the dirty shit Trump administration does to foreigners (and Rosie) just because he doesn't like you or your sane opinions.

    Well, I'm sure he'll annex Canada eventually so you won't be a foreigner anymore.

    Apologies for the interleaving, your response was sort of all over the place and I didn't want to accidentally miss something important.

    edit: I forgot,
    die cloudflare die

  • emghemgh Member, Megathread Squad

    i advise to use two resolvers from different companies regards

    Thanked by 1sillycat
  • I'm still waiting for refugee deals.

  • @emgh said:
    i advise to use two resolvers from different companies regards

    Or you have you are running your own DNS resolves.

  • emghemgh Member, Megathread Squad

    @gbzret4d said:

    @emgh said:
    i advise to use two resolvers from different companies regards

    Or you have you are running your own DNS resolves.

    yeah this is highly advised if you're a nerd

    Thanked by 2sillycat gbzret4d
Sign In or Register to comment.