Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


HurricaneElectric down
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

HurricaneElectric down

Is it just me or he.net went almost completely offline?

Comments

  • It's down here too.

    Thanked by 1Janevski
  • ChanChan Member
    edited February 2015

    Both IPv4 and IPv6 (through he.net tunnel) are fine here

    Thanked by 1Janevski
  • TACServersTACServers Member
    edited February 2015

    While I cannot offer any info about the site itself being down in the past, as its working for me, I can provide some historical data on a tunnel server. TACServers averaged 1.27ms over the last day, no packet loss on a HE tunnel.

    Thanked by 1Janevski
  • joepie91joepie91 Member, Patron Provider
    edited February 2015

    The problem is purely with HE DNS, which went down earlier today. It's mostly back up, but ns1 is still down and ns5 is still slow. Since HE uses their own DNS service, their main site is affected also.

    From the response to an e-mail I sent to HE (as I use HE DNS myself):

    Hello,
    
    We've been seeing issues with many of our global name servers this
    morning.  I don't have an ETA I can provide you with, but our engineers
    are working to resolve the issue as soon as possible.
    
    I apologize for the inconvenience.
    
    Thanked by 2Janevski klikli
  • JanevskiJanevski Member
    edited February 2015

    It appears their DNS services are partially back online now, including a small change within the allowed zones per account...

    Something must have happened, they have been rock solid so far.

  • rm_rm_ IPv6 Advocate, Veteran
    edited February 2015

    joepie91 said: The problem is purely with HE DNS, which went down earlier today

    Mwahaha last time this happened I switched to my own DNS, one time was enough for me, and looks like it was the right choice.

    What's the point of even having five DNS servers, if they are still all within one provider and go down at the same time. What's worse, given this is a "free service" you can't even complain or expect them to care too much about your stuff being down because of them.

    Thanked by 1Janevski
  • joepie91joepie91 Member, Patron Provider

    @Janevski said:
    It appears their DNS services are partially back online now, including a small change within the allowed zones per account...

    Something must have happened, they have been rock solid so far.

    It's not the first time they have an outage - a year or three ago, their entire DNS went 'broken' for a day or so, and all zonefiles were empty - the DNS servers were up, they just wouldn't give out anything but NXDOMAINs. That being said, overall they've been extremely stable, and two outages in the four(!) years that I've been using them is not bad.

    I'm not seeing a change in the allowed zones per account, the counter is still at 9/50 for me like it was before. What did yours change to?

    Thanked by 1Janevski
  • JanevskiJanevski Member
    edited February 2015

    joepie91 said: It's not the first time they have an outage - a year or three ago, their entire DNS went 'broken' for a day or so, and all zonefiles were empty - the DNS servers were up, they just wouldn't give out anything but NXDOMAINs. That being said, overall they've been extremely stable, and two outages in the four(!) years that I've been using them is not bad.

    I'm not seeing a change in the allowed zones per account, the counter is still at 9/50 for me like it was before. What did yours change to?

    Mine went from 9/50 to 9/1, i should ask and see if i have done anything wrong, albeit i believe i know and respect the rules.

    The domain limit has been reached for this account. You must delete one of the domains in order to add an additional.
    
    Domains 9/1
    
    notes:
    At this time, we are limiting the free service to 50 zones which includes your reverse zones (if any).
    
  • I suffered it this morning and IMHO it's not acceptable to have 5 different DNS servers and still experience downtime. I know it's a free service but...

    Anyway:

    The domain limit has been reached for this account. You must delete one of the domains in order to add an additional.
    

    ...

    Domains 7/1
    

    ...

    NOTES:
    At this time, we are limiting the free service to 50 zones which includes your reverse zones (if any).
    Questions or comments regarding this tool should be directed to [email protected].
    Bugs or feature requests should be directed to [email protected].
    Our TOS/AUP is now online. click for our Terms of Service.
    
    Thanked by 1Janevski
  • joepie91joepie91 Member, Patron Provider
    edited February 2015

    Oh, huh. It just changed to 9/1 for me in the past few minutes as well. Strange. Perhaps they are dealing with malware/spam issues, and trying to temporarily limit the damage?

    Thanked by 1Janevski
  • @joepie91 said:
    Oh, huh. It just changed to 9/1 for me in the past few minutes as well. Strange. Perhaps they are dealing with malware/spam issues, and trying to temporarily limit the damage?

    Yes, i believe so, there must have been some serious abuse issue, so they had to temporarily hit the general "kill switch" regarding the total zones number per account.

  • MaouniqueMaounique Host Rep, Veteran
    edited February 2015

    M$ style attacks and "resolutions" to the malware problem ? :o

  • rm_ said:

    What's the point of even having five DNS servers, if they are still all within one provider and go down at the same time. What's worse, given this is a "free service" you can't even complain or expect them to care too much about your stuff being down because of them.

    Use them for slave DNS only. Use your own master server. That way they add redundancy to your setup rather than take it away.

    Thanked by 1Maounique
  • rm_rm_ IPv6 Advocate, Veteran
    edited February 2015

    Abdussamad said: Use them for slave DNS only. Use your own master server. That way they add redundancy to your setup rather than take it away.

    Two problems with that:
    1) when 4 out of 5 NSes for your domain are down, it won't be pretty for your visitors trying to load your site, even if it eventually resolves and loads; dunno if it'll comfort you much in this case that "only the slave servers were down";
    2) as we read above, HE.net can go down in really inventive ways,

    joepie91 said: their entire DNS went 'broken' for a day or so, and all zonefiles were empty - the DNS servers were up, they just wouldn't give out anything but NXDOMAINs.

    So if 4 out of 5 NSes for your domain give NXDOMAIN on all your records, this isn't too pretty either.

    Best to stay away from HE DNS (and from any third-party "cloud" DNS services) altogether.

  • my account is still set at 50 zones Domains 12/50

  • MaouniqueMaounique Host Rep, Veteran

    rm_ said: Best to stay away from HE DNS (and from any third-party "cloud" DNS services) altogether for production sites.

    There, fixed it for you.
    I use afraid.org for my myriad of hosts, they have a hickup now and then, it is at most annoying, but it beats the extra load to setup and supervise your own DNS network if you make one. Besides, have free anycast vast network from our partner dns4.pro and if i need can get a rage4 too, but, if HE goes down, anything can and will, if I have my own, it will go down due to my mistake and I prefer to have other people to blame :P

    Thanked by 1vimalware
  • rm_rm_ IPv6 Advocate, Veteran
    edited February 2015

    Maounique said: if I have my own, it will go down due to my mistake and I prefer to have other people to blame :P

    And I prefer finding out what I did wrong, then just going and fixing it, rather than waiting on some ticket for some "support specialist" who doesn't give two shits, to tell me

    joepie91 said: I don't have an ETA I can provide you with, but our engineers

    are working to resolve the issue as soon as possible.

  • No, it's not at a hassle or complicated to have ones own DNS infrastructure. I, for instance, have multiple NSD servers geo dispersed and all I need to do when changing anything is ... well, changing it; on my master. The rest is automagically done.

    That said, it might be desirable for some to have GeoDNS and anycast and whatnot. For those guys a rage4 or nsone service might be nice. And one could still fully have and control ones own master and use the service only for slaves. In fact, one could even have a "blind" master reponding to and interacting with only the infrastructure slaves (to avoid a service providers panel stuff).

    All in all I tend to agree with rm_ because no matter how many servers they have, one shouldn't put all eggs into 1 basket and one should stay in control.

    Side note: I'm grinning when seeing gazillions of people shelling out money for DNS DDOS protection **g

  • @bsdguy said: Side note: I'm grinning when seeing gazillions of people shelling out money for DNS DDOS protection **g

    ???

    You lost me there at the end...

  • @aglodek said:
    You lost me there at the end...

    Hints:

    • How does a "DNS DDOS attack" actually work?
    • Look up rate limiting for any decent DNS server.
Sign In or Register to comment.