News for hackers. Stuff that matters.
Re:DNS doesn't “propagate” by isclever on Monday December 06, 2021 @02:50PM (#29464671)
Google and Cloudflare allow anybody to expire any record in their cache, handy to have to if you make a mistake that is affecting customers.

Google's 8.8.8.8: https://developers.google.com/speed/public-dns/cache

Cloudflare's 1.1.1.1: https://1.1.1.1/purge-cache/

Re:DNS doesn't “propagate” by brycewray on Monday December 06, 2021 @03:21PM (#29465082)
Re:DNS doesn't “propagate” by arantius on Tuesday December 07, 2021 @03:58PM (#29478141)
FYI There's an easier-to-remember URL for Google: https://dns.google/cache

The URL above is the documentation of the feature, which happens to also embed it.

Re:DNS doesn't “propagate” by Hamuko on Monday December 06, 2021 @03:37PM (#29465329)
I tried using the 8.8.8.8 one for one domain, but sending emails from Gmail to that domain failed for hours, so it's not perfect. One would at least think that Gmail uses 8.8.8.8 for DNS.
Re:DNS doesn't “propagate” by BenjiWiebe on Monday December 06, 2021 @09:31PM (#29468543)
Was it failing at GMail before you flushed at 8.8.8.8? Because then you would have to wait while GMail's own cache expired, assuming they even use the public 8.8.8.8 service.
Re:DNS doesn't “propagate” by fragmede on Monday December 06, 2021 @04:32PM (#29465991)
Domains themselves don't use DNS servers in the same way your network connection needs DNS to work right. Did you try using 8.8.8.8 for your domain's nameservers? Because that's a misconfiguration - your domain's nameservers need to be configured to be authoritative for your domain - which Google's HonestDNS is not going to claim to be. (Even if you're using GCP.)
Re:DNS doesn't “propagate” by dwild on Monday December 06, 2021 @04:38PM (#29466060)
I think he meant he used the Flush Cache functionality of 8.8.8.8 but emails still failed on Gmail until their cache was invalidated (so Gmail probably is not using 8.8.8.8, or the flush cache doesn't actually works as intended).
Re:DNS doesn't “propagate” by lathiat on Monday December 06, 2021 @10:36PM (#29468841)
caches are hierachical. Even your local machine most of the time now with recent OS releases will cache records, then your home router or some other DNS server on your network will often cache things before then referring to your ISPs or Googles DNS server.

Invalidating the cache at one doesn't invalidate the cache downstream of them if they already looked the record up recently. But it does mean that anyone who hadn't looked up the record will get the correct result straight away.

Re:DNS doesn't “propagate” by belter on Monday December 06, 2021 @06:00PM (#29466875)
1) What if we purge 8.8.8.8 at 8.8.8.8 ?

2) What if we purge 1.1.1.1 at 1.1.1.1 ?

3) What if we purge both about the other at the same time?

4) What if we purge aaaaaaa!

So much time...so many ideas...are they sure they will end up well?

Re:DNS doesn't “propagate” by Dylan16807 on Monday December 06, 2021 @06:50PM (#29467370)
You purge domains, not IPs.

And it's not like they need to hold on to any state to work. If you had access you could purge everything and have them start fresh from the root servers, and it would work fine. (As long as the load spike doesn't make it decide to do something dumb, of course.)

Re:DNS doesn't “propagate” by kelnos on Monday December 06, 2021 @06:51PM (#29467382)
> 1) What if we purge 8.8.8.8 at 8.8.8.8 ?

8.8.8.8 isn't a DNS name, it's an IP address. There's nothing to purge.

Re:DNS doesn't “propagate” by belter on Tuesday December 07, 2021 @10:44AM (#29473656)
I realize that. Sorry...I meant to say

dns.google from dns.google

one.one.one.one from one.one.one.one

Re:DNS doesn't “propagate” by belter on Tuesday December 07, 2021 @10:47AM (#29473716)
I guess the downvotes are about 1 and 2 but ok, I meant

dns.google and one.one.one.one