#geodns — Public Fediverse posts

Как сделать и настроить свой CDN

CDN (сеть доставки контента) представляет собой группу серверов, размещаемых в разных географических регионах с целью обеспечить быструю загрузку контента для пользователей из этих регионов. Чаще всего сети доставки контента используются для ускорения загрузки статических файлов: картинок, видео, скриптов, zip-архивов. Каждый из CDN серверов просто хранит одни и те же файлы, а пользователь получает их с ближайшего сервера. Хранение контента у большинства сетей доставки контента организовано так: CDN сервер, получив в первый раз от пользователя запрос на отдачу файла, загружает его с оригинального сервера к себе, кэширует и тут же отдает пользователю. Для всех последующих запросов файл уже выдается из кэша. Некоторые сервисы позволяют настраивать длительность хранения кэшируемых данных, а также их предварительную загрузку (прекэш). Иногда может понадобиться настроить собственную сеть доставки контента. Давайте рассмотрим, для чего это нужно и как это сделать. Это наша будущая CDN из 5 серверов, которая будет раздавать контент на весь мир

https://habr.com/ru/articles/810241/

#cdn #cdnсервис #geodns #nginx

问题解决，Arch 的 GeoDNS 服务商似乎不支持 ECS（使用 dig +subnet= 测试），导致实际上是按照 Google DNS 的 出口节点分配 CDN。
@felixonmars 关于 Arch CDN 的 GeoDNS 配置你有头猪吗？

#DNS #ECS #GeoDNS

问题解决，Arch 的 GeoDNS 服务商似乎不支持 ECS（使用 dig +subnet= 测试），导致实际上是按照 Google DNS 的 出口节点分配 CDN。
@felixonmars 关于 Arch CDN 的 GeoDNS 配置你有头猪吗？

#DNS #ECS #GeoDNS

We host our own authoritative DNS servers rather than using a managed service. When you connect to https://grapheneos.org/, your DNS resolver service obtains an IP from our own DNS servers. We route traffic to the closest server via GeoDNS and have automatic failover on downtime.

#grapheneos #privacy #security #dns #nameserver #anycast #geodns #failover #powerdns #ovh #buyvm

We host our own authoritative DNS servers rather than using a managed service. When you connect to https://grapheneos.org/, your DNS resolver service obtains an IP from our own DNS servers. We route traffic to the closest server via GeoDNS and have automatic failover on downtime.

#grapheneos #privacy #security #dns #nameserver #anycast #geodns #failover #powerdns #ovh #buyvm

We host our own authoritative DNS servers rather than using a managed service. When you connect to https://grapheneos.org/, your DNS resolver service obtains an IP from our own DNS servers. We route traffic to the closest server via GeoDNS and have automatic failover on downtime.

#grapheneos #privacy #security #dns #nameserver #anycast #geodns #failover #powerdns #ovh #buyvm

We host our own authoritative DNS servers rather than using a managed service. When you connect to https://grapheneos.org/, your DNS resolver service obtains an IP from our own DNS servers. We route traffic to the closest server via GeoDNS and have automatic failover on downtime.

#grapheneos #privacy #security #dns #nameserver #anycast #geodns #failover #powerdns #ovh #buyvm

We host our own authoritative DNS servers rather than using a managed service. When you connect to https://grapheneos.org/, your DNS resolver service obtains an IP from our own DNS servers. We route traffic to the closest server via GeoDNS and have automatic failover on downtime.

#grapheneos #privacy #security #dns #nameserver #anycast #geodns #failover #powerdns #ovh #buyvm

I am considering running a small #CDN (5/6 pops) and the cost estimate is wild.

Anycast on ipv6 is essentially free (Hetzner gives away /64 for free with servers), ipv4 is a no go considering the price of a /24 block.

#GeoDNS providers vary greatly in pricing and reviews, so far I haven’t found the sweet spot of cost / trust.

If anyone got recommendations please send them my way. #dns

I am considering running a small #CDN (5/6 pops) and the cost estimate is wild.

Anycast on ipv6 is essentially free (Hetzner gives away /64 for free with servers), ipv4 is a no go considering the price of a /24 block.

#GeoDNS providers vary greatly in pricing and reviews, so far I haven’t found the sweet spot of cost / trust.

If anyone got recommendations please send them my way. #dns

We've made significant improvements to our HTTPS-based network time update system for our next OS release.

https://github.com/GrapheneOS/platform_frameworks_base/commit/b0407ee4a553784a8b6af6e191f886eb021289ce

Should provide most users with around 3 to 15ms precision instead of more than 1000ms mainly from moving away from standard TLS/HTTPS timestamps.

#grapheneos #privacy #security #https #ntp #nts #geodns #time

We've made significant improvements to our HTTPS-based network time update system for our next OS release.

https://github.com/GrapheneOS/platform_frameworks_base/commit/b0407ee4a553784a8b6af6e191f886eb021289ce

Should provide most users with around 3 to 15ms precision instead of more than 1000ms mainly from moving away from standard TLS/HTTPS timestamps.

#grapheneos #privacy #security #https #ntp #nts #geodns #time

@ralf Yeah, if I have some #free resources lying around, I would definitely do #anycast as well!

I don't particularly like the inaccuracies of #GeoDNS and would avoid it if at all possible.

I guess it all comes down to cost vs desired outcomes 😀