quicksilver03

Thanks for letting me know!

This is fixed now, I'll look into why the monitoring tools didn't catch this one as they should have.

I happen to run an affordable EU supplier who does DNSSEC, and also AXFR (incoming and outgoing). I offer a free plan from time to time, but not at the moment to preserve resources for paying customer.

https://www.ptrdns.net/

I'm interested to know the rationale behind the choice of AXFR to replicate zones, as opposed to database replication. Has this been always reliable enough for you?

Also, is the AXFR latency an issue or it stays always within your acceptable parameters?

This looks interesting, I run PTRDNS https://www.ptrdns.net/ and some of the features I offer overlap with DynIP's.

I decided to use MariaDB as backend and replicate the data with Galera, I also built a proxy that sits in front of PowerDNS and allows per-account API keys (and hopefully someday per-zone API keys).

I'm curious to understand the rationale behind your architecture choices.

PowerDNS has an API which is working pretty well, I've been using it to generate ACME certificates since a few years and I also built a DNS hosting service around it.

I've been able to submit new entries to

https://eucloud.tech/

https://buy-european.net/

I've also found other problematic ones:

https://euro-stack.com/ (I couldn't understand how to submit a new entry)

https://www.goeuropean.org/ (all submissions fail with an AirTable error [sic] that the workspace is at the record limit)

I've seen the same thing, the site accepts submissions but there's no one to either approve or reject them.

Unfortunately they did really well at SEO at one time, and more active alternatives appear far below in the search results.

I have an issue with

    The geneal idea of HTMX is that your HTML will be rendered by the backend — à la Server Side Rendering.

To me this phrase makes no sense, what's the thought process behind this meaning of "render"? The only place HTML is "rendered" is in a browser (or in a user agent, if you prefer).

Having seen some of those cases, I'd say it's rather because Bob in Finance doesn't want to be bothered with MFA and has raised so much stink with the CFO that IT has been ordered to disable MFA for him.

Can you share what's your solution for filtering incoming spam? I've had to abandon Stalwart because its spam filter is so ineffective and inconsistent.

That looks more like SOC2 than ISO-27001 though.

GoSSL certificates (using the ACME protocol) will also no longer be issued: https://community.buypass.com/t/y4y130p

Is having one key per zone worth paying money for? It's on the list of features I'd like to implement for PTRDNS because it makes sense for my own use case, but I don't know if there's enough interest to make it jump to the top of this list.

The AMD drivers are open source, but they definitely are not good. Have a look at the Fedora discussion forums (for example https://discussion.fedoraproject.org/t/fedora-does-not-boot-... ) to see what happens about each month.

I have no NVIDIA hardware, but I understand that the drivers are even worse than AMD's.

Intel seems to be, at the moment, the least worse compromise between performance and stability,

Distribute your domain across 2, better 3 registrars, so if one does something stupid with your domains at least the others keep working.

What technique are you using for redirecting traffic to region B when region A is offline? And what happens if I have 2 nodes in a region and one goes offline?

That's an excellent example of what I like to call "good IT hygiene". I too would like to know what kind of tools you have to perform the functional and integration tests, and to execute the various rollouts.

> P.S., I swear the certification PDFs used to include this information (e.g., https://cloud.google.com/security/compliance/iso-27018?hl=en) but now these are all behind "Contact Sales" and some new Certification Manager page in the console.

This is not good, I can't think of any actual reason to hide those certificates.

For comparison, AWS makes their ISO-27001 certificate available at https://aws.amazon.com/compliance/iso-27001-faqs/ and also cites the certifying agent, most of which have a search page from where you can find all the certificates they've issued.

I'm using Vector for my own infrastructure and at work, at the time it seemed the best option to ship logs to various destinations. Are there any alternatives?

I'd prefer an application to automatically fill in my data in those junk ATS systems, such as WorkDay, that pretend to parse my LinkedIn profile or a PDF resume and inevitably makes me do all the copy-paste twice.

A couple of years ago it was so bad that I stopped applying as soon as I saw that WorkDay crap pop up, regardless of the company.

I'd avoid LemonSqueezy because the payouts fees if you're outside of the USA are too high (check out https://docs.lemonsqueezy.com/help/getting-started/fees ).

Paddle may be an option, depending on what your SaaS will sell, but if they start pretending that your business falls into a high-risk category they will demand 3 months of processing statements before allowing you to use their platform.

I'm working on https://www.ptrdns.net , a primary and secondary DNS hosting service built around the PowerDNS API.

The problems that are on my mind right now are 1. how to improve visibility on search engines and 2. how to add POPs on Anycast IPs to improve latency for resolvers without selling my right arm to obtain a /24.

There's one list I know of at https://bgp.services/ (not sure how complete or accurate it is, but it's a starting point).

The amdgpu driver has been the main source of issues for me on 6.10, but I had issues on older 6.x versions as well: for example, on a desktop with 2 monitors, I had to turn on the 2 monitors simultaneously or the UI would freeze.

I wrote one such proxy, though mine is not open source: I found relatively easy working with zones and records, and a well-designed test suite helps building confidence that a key for an "account" A cannot read or write into "account" B.

I'm putting "account" between quotes because it isn't a PowerDNS concept, there is just a lonely varchar column in the 'domains' table where one can store some account-related information. To handle TSIG keys I had to extend PowerDNS's data model to represent the association between a TSIG key and an "account".

I've just launched a DNS hosting provider ( https://www.ptrdns.net ) and this is one of the problems I'm worried about. With the PowerDNS backend I'm using, once a zone is added PowerDNS will respond to queries for its record regardless of the nameserver the queries are sent to. One can, for example, query the IP address of the nameserver to get a response.

The Route 53 technique of assigning random server names looks a bit like the technique of creating virtual hosts in a nginx server, but it looks like this is a custom AWS implementation and not something that comes out of the box in any DNS server software I know.

You have just described Testcontainers [1] , and if you are a Java developer you may want to look into Testcontainers for Java [2].

For example, in one of my projects I use TestNG to instantiate a MariaDB container, run the Flyway migrations on it and then populating the tables with the test data:

  mAPIDBContainer = new MariaDBContainer<>(DockerImageName.parse(MARIADB_CONTAINER_TAG))
              .withDatabaseName("apidb")
              .withPassword("password")
              .withNetwork(containerNetwork)
              .withNetworkAliases("apidb")
              .withExposedPorts(3306);
      mAPIDBContainer.start();
      Flyway flyway = Flyway.configure()
              .dataSource(mAPIDBContainer.getJdbcUrl(), mAPIDBContainer.getUsername(), mAPIDBContainer.getPassword())
              .encoding("UTF-8")
              .locations("classpath:apidb/migrations")
              .load();
      flyway.migrate();
      ScriptUtils.runInitScript(new JdbcDatabaseDelegate(mAPIDBContainer, ""), "sql/apidb/apidb-test-data.sql");

[1] https://testcontainers.com/ [2] https://java.testcontainers.org/