DDOS on Namecheap Free DNS and Default DNS V2

Re:DDOS on Namecheap Free DNS and Default DNS V2 by nc-customer on Thursday February 20, 2014 @01:26PM (#7272610)

If namecheap chose to stop assigning all customers the same list of DNS servers, it would benefit namecheap as well. There's 200+ people in the queue for live chat right now :)

It's not DDOS mitigation or H/A, or some other high end feature.

[ Parent | on HN ]

Re:DDOS on Namecheap Free DNS and Default DNS V2 by scurvy on Thursday February 20, 2014 @02:49PM (#7273104)

The only way this would be successful is if the "customer IP's" were spread accross separate networks, and the announcement for the attacked network was sent somewhere else.

Assigning customers across lots of IP's in the same /24 isn't going to do anything. A volumetric attack is still going to succeed there.

In this landscape of ever-dwindling portable IPv4 subnets, it's harder and harder to get a /24. You won't get an assignment if your justification is "to fight a DDoS."

[ Parent | on HN ]

Re:DDOS on Namecheap Free DNS and Default DNS V2 by nc-customer on Thursday February 20, 2014 @03:23PM (#7273295)

So namecheap would need a few different, separate IPv4 subnets.

Like the ones they already have?

http://bgp.he.net/AS22612#_prefixes

[ Parent | on HN ]

Re:DDOS on Namecheap Free DNS and Default DNS V2 by scurvy on Monday February 24, 2014 @12:09AM (#7289202)

Good point. They should be spreading things around more.

[ Parent | on HN ]