Re:DNSimple DDOS Attack
by toomuchtodo on Monday December 01, 2014 @11:33PM
(#8685724)
My god no. Don't even waste your time with VPSs and BIND.
* Get accounts with AWS (Route 53), dnsmadeeasy, and cloudflare.
* Monitor resolution at all of their name servers
* Either proactively spread your authoritative nameservers across providers, or update your root NS records based on your monitoring.
my experience shows, that at least 3 servers with 3 different providers is good enough. and "providers" I mean different company, city, datacenter, transit provider...
trusting single entity with anything (even if they say that they have many servers blabla... geologically blabla...)... well, you have situation like this right now :)