Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Networking

Best DNS Service With API Access? 221

netaustin writes "My company runs quite a few media websites, mostly on Drupal, and about half on ec2. We have a good server setup with ec2 which allows us to route requests through Pound, a cluster of Varnish servers, then a cluster of Apache servers. We manage 50 domains (one per state) like this. Problem is, anytime things change, we have to manually adjust DNS for all 50 states, which is very boring and usually causes negative side effects too as we can't ever adjust all 50 DNS entries at once. We'd like to just change DNS providers and be done with it, but there are a lot of options, and I don't often shop for DNS services. I use EveryDNS for my personal domains, but I don't think they provide an API and it'd feel a little dishonest to reverse engineer the forms on their site since they're an esteemed donations-based service. I wouldn't feel bad about doing that to DNSPark, but they have a CAPTCHA image accompanying their login form, so goodbye DNSPark. I found a couple services that seem to do what I'm looking for, but they both feel a bit Microsoft-y and since I only want to change once, I want to get this right. Advice?"
This discussion has been archived. No new comments can be posted.

Best DNS Service With API Access?

Comments Filter:
  • DynDNS (Score:5, Informative)

    by rho ( 6063 ) on Wednesday September 24, 2008 @09:56PM (#25146163) Journal

    DynDNS.

    That was easy.

    • Re:DynDNS (Score:5, Informative)

      by crush ( 19364 ) on Wednesday September 24, 2008 @10:04PM (#25146235)
      Yeah. One of the most reliable and ethical operators in the business.

      This [dyndns.com] seems like an appropriate link.
      • Re:DynDNS (Score:5, Informative)

        by oskard ( 715652 ) on Wednesday September 24, 2008 @10:20PM (#25146361)
        Also be sure to check out Dynect!

        DynDNS also offers another service, more business class. It has a MUCH more robust API, offers Failover, Load Balancing, Anycast, etc. Multiple users, node-based permissions. 37Signals, Mozilla, and RackSpace use Dynect. Highly recommended, give them a call!

        http://dynect.com/technology/developers.html [dynect.com]

        http://dynect.com/features/api.html [dynect.com]
      • Re:DynDNS (Score:5, Informative)

        by rho ( 6063 ) on Wednesday September 24, 2008 @10:32PM (#25146469) Journal

        Yeah. One of the most reliable and ethical operators in the business.

        This should be emphasized. DynDNS is both reliable and ethical, and have been for a long time. Indeed, since before they went commercial. When they were non-com, you could get unlimited custom DNS services for a $30 donation. Guess what? When they went commercial they honored that pledge. I still have a number of "never expires" services because of this.

        Seriously, it's not worth dicking around with DNS. Get it done right the first time.

        • Re:DynDNS (Score:4, Interesting)

          by Anonymous Coward on Thursday September 25, 2008 @12:00AM (#25147067)

          Actually I have had two accounts 'vanished' by DynDNS now and would never use them again, including one that has been with them for about 8 years first using their dyndns service and more lately (over the last few years) using their staticdns service. Both appear to have been clobbered by their 'stuff must get updated at least every 30 days' policy [1]. Which of course makes utterly no sense for a staticdns service. The staticdns account was for a domain with a PR of about 5 (it was on the air and highly linked-to for over seven years...), so I was understandably upset to see it suddenly vanish off the air one day with no warning whatsoever.

          Totally unimpressed, I would never, ever touch them for things I cared about again.

          [1] Read the first couple of sentences of the second paragraph on this page:
          https://www.dyndns.com/account/resetpass/index.html

          • Re:DynDNS (Score:5, Insightful)

            by ishobo ( 160209 ) on Thursday September 25, 2008 @12:50AM (#25147385)

            You should have gotten your own domain, not the host sitting on their domain, and used the CustomDNS service. I have an account that has been inactive for over a year and it is still there. CustomDNS domains will never expire if you have been with them since the begining when they were free; all those domains were grandfathered and remain free of charge.

            Totally unimpressed, I would never, ever touch them for things I cared about again.

            With the free DynamicDNS service, you get what you pay for. If the infrastructure is that important to you, pay for the account.

          • by jsight ( 8987 )

            Actually I have had two accounts 'vanished' by DynDNS now and would never use them again, including one that has been with them for about 8 years first using their dyndns service and more lately (over the last few years) using their staticdns service. Both appear to have been clobbered by their 'stuff must get updated at least every 30 days' policy [1]. Which of course makes utterly no sense for a staticdns service. The staticdns account was for a domain with a PR of about 5 (it was on the air and highly linked-to for over seven years...), so I was understandably upset to see it suddenly vanish off the air one day with no warning whatsoever.

            Totally unimpressed, I would never, ever touch them for things I cared about again.

            [1] Read the first couple of sentences of the second paragraph on this page:
            https://www.dyndns.com/account/resetpass/index.html [dyndns.com]

            This is absolutely true... and they don't just suspend it with a warning, they just flat out and immediately delete. Giving everyone your IP address would be less painful than dealing with those people.

      • by Bob Uhl ( 30977 )
        I don't know so much about 'ethical' anymore. Their free service now expires monthly or so, with only a five-day warning. One of these months I'm going to be on vacation for a week and when I return will discover that my domain has expired:-(
        • by kv9 ( 697238 )

          I don't know so much about 'ethical' anymore. Their free service now expires monthly or so, with only a five-day warning. One of these months I'm going to be on vacation for a week and when I return will discover that my domain has expired:-(

          just have a dynamic dns entry that updates itself every <less than one month>.

          this happened to me already. I had a 7 year old account with them which expired because a dynamic DNS entry updated itself only when the PPPOE connection was made to one of my providers -- which, oddly enough, is rock solid and only reconnects once every 2-3 months. so I just force the updates every other week. this way the account stays enabled.

          ps: I have my own domain, I don't depend on DynDNS entirely, but they are ni

    • by Anonymous Coward on Wednesday September 24, 2008 @11:07PM (#25146745)

      Hi there, I am representing my client, Staples, Inc. Your use of the phrase "That was easy" treads upon the Intellectual Property right of Staples, Inc. Use of my client's slogan without prior written authorization is not permitted. You will immediately cease claiming that anything other than Staples, Inc. "was easy". This includes everything from DynDNS to your girlfriend and/or wife.

      Sincerely yours,

      Mr. Vatwozeezee

    • GoDaddy dba WildWest (Score:5, Informative)

      by bobbozzo ( 622815 ) on Thursday September 25, 2008 @12:45AM (#25147361)

      GoDaddy dba WildWest has an API, but we seem to have ended up being guinea pigs for it, and it didn't go well. Their documentation had features that didn't exist, promised 24-hour turnaround on support failed, ...
      It's working OK now, but I can't really recommend it.

  • diy?? (Score:3, Insightful)

    by sholdowa ( 242332 ) on Wednesday September 24, 2008 @09:59PM (#25146183) Homepage

    Why not run your own??

    • Re:diy?? (Score:5, Insightful)

      by Anonymous Coward on Wednesday September 24, 2008 @10:42PM (#25146563)

      >Why not run your own??

      Apparently the article submitter isn't competent enough to do this on his/her own: Why else would he/she submit something so obviously mission critical to Slashdot?

      I *hate* seeing articles such as these on Slashdot: They fall into the "do my job for me" category, and should be tagged as such... only, now days, there are *so* many people on Slashdot lacking basic networking skills, it's almost moot: Hell, articles such as these generate traffic/revenue for Slashdot (to which I am contributing, of course), simply because of that fact. I imagine that such are the second highest traffic/revenue generator, right behind the "RIAA/MPAA"-type articles.

      My advice: If you can't figure out a viable method to accomplish what you need, using the skills and knowledge you possess, perhaps you should *hire* someone that can? And, learn from them, as they are doing it?

      Slashdot: News For Wannabes, Stuff That Matters To Them.

      Captcha: bitterly

      Now THAT is a nice one.

      • Re:diy?? (Score:4, Funny)

        by WhatAmIDoingHere ( 742870 ) <sexwithanimals@gmail.com> on Wednesday September 24, 2008 @11:02PM (#25146721) Homepage
        "My advice: If you can't figure out a viable method to accomplish what you need, using the skills and knowledge you possess, perhaps you should *hire* someone that can? And, learn from them, as they are doing it?"

        That's what HE was hired for.
        • by Lennie ( 16154 )

          I wouldn't mind helping or the company I work at (the last would be for pay, maybe the first one as well).

        • All too often that's exactly how these situations work. Hire someone to do a job that they think they know how to find the people to do.

          I run tinydns for the record, to host my DNS entries. Can't imagine why I'd get someone else to do it.

      • Re:diy?? (Score:5, Insightful)

        by NETHED ( 258016 ) on Wednesday September 24, 2008 @11:22PM (#25146841) Homepage

        I know replying to an AC won't do much, but I just feel like it, and have not much else to do right now.

        Begin Rant...
        Slashdot was _the_ site for breaking news a few years ago, and sites would be regularly slashdotted, etc. Now, blogs have taken over, and push out news MUCH faster than slashdot. I think slashdot has the ability/potential to become more of a community. I used to read the comments of slashdot for more insight, as there are truely intelligent people on this site that leave comments, but lately, the S/N ratio has gone bad.

        Stories like this are (I think) an attempt to bring back the good S/N ratio. No, slashdot no longer breaks stories, nor does it need to, the slashdot community has probably read about the articles somewhere else, and now comes here to discuss them. Yes, people flame, and there are many FPs, but thats slashdot, and it adds a little something.

        So when I read this story, I read it because I'm looking to learn something from the comments. I think thats the direction the slashdot community is going towards.

        End of Rant...

        • Slashdot was _the_ site for breaking news a few years ago,

          Err, umm, not so much.

          Sure, they weren't too far behind, but being first was NEVER the motivation behind /. I can recall numerous times they waited for DAYS after some major event before picking the best of 100,000 submissions to finally post.

          and sites would be regularly slashdotted, etc.

          The internet has bigger pipes, as do providers.

          There are now numerous large 3rd parties that are happy to offer central hosting services of large images, videos, an

        • by Sorthum ( 123064 )

          No, I see where the AC is coming from. At $DayJob I'm an email admin. Seeing more and more small businesses going the Google Apps route, or outsourcing their infrastructure just rubs me the wrong way. It seems like the new solution for everything is "outsource it to Google" or one of the other "big names" in services these days. The problem is that this approach just serves to make EVERYONE dependent upon one particular provider. Assume Google breaks, goes away, etc-- how many sites that you visit dail

          • You sound like the I imagine the old power company salesmen did before consolidation of the power industry turned into a near monopoly in this country (USA). I have maybe one or two outages a year, I consider that a pretty damn good SLA considering I get some nasty storms where I live.
            • by Sorthum ( 123064 )

              Sure, but email isn't 1. regulated, 2. supported nearly as well as the power infrastructure, 3. a service people depend upon for life or death situations.

      • by alta ( 1263 )

        There are technical and business reasons NOT to run your own DNS, even if you are capable. I'm using PAID DNS services from companies that specialize in DNS to save cost. One example is a dnd service that watches for my websites to go down and redirects to what's left up. It will also send people to the server that's geographically closest. Sure, I could pay a few hundred a month for some colo'd servers around the internet. Then either buy some expensive DNS software to do this for me, or try to roll m

      • Apparently the article submitter isn't competent enough to do this on his/her own: Why else would he/she submit something so obviously mission critical to Slashdot?

        In fairness, I've asked questions on Slashdot that I'm technically competent to research on my own, but I want some real-world information about the alternatives. For example maybe one CPU specs faster than another but has huge heat problems that aren't apparent in the datasheet. Or suppose I were looking to start using either MySQL or PostgreSQL but wasn't sure of the differences because the feature lists look similar. That's when asking for advice makes a lot of sense, because you're looking for inform

    • by pooh666 ( 624584 )
      Maybe he isn't such an idiot after all? I mean most of the BS going on these days with DNS is related to Linux morons who think they know what they are doing because they can get BIND running. It also accounts for a lot of outages and a lot of job security for said morons.
  • Run a master? (Score:5, Insightful)

    by The Lesser Powered O ( 20857 ) on Wednesday September 24, 2008 @10:00PM (#25146199)

    How about running your own master DNS server, and having your provider slave from that.

    • Re: (Score:2, Informative)

      by Anonymous Coward

      If you don't mind running your own master DNS server like this poster recommends, DNS Made Easy has a very cheap and very redundant IP anycast based DNS service that we use for all corporate sites. For dollars a month you could have access to their nameservers, which run all over the world. Other services offer similar enterprise DNS functionality, but comparing performance with price, we haven't been able to find a better deal yet.

    • Re:Run a master? (Score:5, Informative)

      by Charles Dodgeson ( 248492 ) * <jeffrey@goldmark.org> on Wednesday September 24, 2008 @10:57PM (#25146675) Homepage Journal

      Me, too. (That means "mod parent up")

      You can use DNSpark (whom I use) or other providers as slaves. Your master doesn't even need to be publicly accessible, just as long as you allow the appropriate zone transfers. This way you can have your own little scripts that generate the zone files on a host you fully control, while having the world query those professionally managed servers.

      • Re:Run a master? (Score:5, Interesting)

        by Sentry21 ( 8183 ) on Thursday September 25, 2008 @02:57AM (#25147897) Journal

        to heck with zone files, set up something like PowerDNS and set it up with a database backup. Do one update query and push out to the slaves. PDNS is also quite snappy, and configuration is far less arcane compared to Bind - in five minutes I had an authoritative, non-recursing DNS server which was not vulnerable to the Kaminsky vulnerability (even if it did recurse). It does things same, logs sanely, and doesn't make me feel like a clueless newbie like Bind does (even after ten years of adminning DNS servers).

        Check it out, it's worth it.

        • by Sentry21 ( 8183 )

          err. Database backEND. Silly iPhone text correction.

          • Re: (Score:2, Informative)

            by nullchar ( 446050 )
            What sort of load can the DB backend handle? Does it use caching? There's a DLZ-bind mod out there, but it executes at least one SQL query for every DNS query; which can't handle even moderate load.
            • If you run a non-public master with public slaves running BIND, load should not be an issue.
            • Re: (Score:2, Insightful)

              by Lorens ( 597774 )

              What sort of load can the DB backend handle?

              Enough.

              Does it use caching?

              Yes.

              There's a DLZ-bind mod out there, but it executes at least one SQL query for every DNS query; which can't handle even moderate load.

              That's their problem. PowerDNS rocks. No more pesky start-up times, no more wondering if the syntax is OK so everything can start up again after a reload, let client have a web interface to his zone using simple SQL...

    • Re:Run a master? (Score:4, Insightful)

      by WuphonsReach ( 684551 ) on Thursday September 25, 2008 @01:04AM (#25147457)
      How about running your own master DNS server, and having your provider slave from that.

      That's the ideal way to do it. Setup your own master server using BIND or whatever, and you get the best of both worlds. You can script access to your DNS server entries, make updates however you want to, and make it as secure as you want to.

      Then let the DNS provider simply serve as secondary servers for your DNS domains. Even if your primary DNS server is down for maintenance, the NS records on your domains are pointing at the DNS provider's pool of servers which are geographically separated.

      (Alternately, you could try a service like DNSMadeEasy, which allows you to make API-style updates to your DNS entries. Unfortunately, security is a bit thin and you have to hard-code usernames and passwords.)
    • Out of interest, who would you go to for DNS glue records? Acting as primary domain servers for domains isn't as easy as setting up named/powerdns and plugging those records into your registrars 'Domain Servers' fields - you need DNS glue from someone above you in order for those DNS servers to be valid.

      Or has stuff changed since I last did this a few years back?
      • Re: (Score:3, Informative)

        by Anonymous Coward

        "who would you go to for DNS glue records?"

        If really needed, your DNS registrar will do.

        "you need DNS glue from someone above you in order for those DNS servers to be valid."

        No, you don't.

        "Or has stuff changed since I last did this a few years back?"

        No, it hasn't.

        You only need glue records... when you need glue records. For a NS that means only if the name server for a domain happens to be within the same domain (so NS for example.com is for instance ns.example.com). On the typical scenario DNSs will be s

  • by brainchill ( 611679 ) on Wednesday September 24, 2008 @10:03PM (#25146229)
    It sounds like it's time to run your own dns servers. For what you're trying to do I recommend powerdns with either a mysql or postgres backend. You can do massive updates with regular sql update syntax very quickly and anything that can talk mysql can update it ... perl, php, ruby, etc ... you name it.
  • by perlchild ( 582235 ) on Wednesday September 24, 2008 @10:04PM (#25146241)

    Are we talking any sort of budget here, or does it have to be free?

    Quite a few places will charge a nominal per-year fee for dns, and provide good uptime...

    A lot of those are the places you register the domains from, and they make more money on registrations than dns service, but provide both.

    Please provide details

    • by Anonymous Coward

      Quite a few places will charge a nominal per-year fee for dns, and provide good uptime...

      Could you be more specific?

  • by rawg ( 23000 )

    You can always run your own DNS server on a slice somewhere using MyDNS. I've had really good luck with it for over 5 years.

  • Elastic IPs? (Score:4, Interesting)

    by andrewl6097 ( 633663 ) on Wednesday September 24, 2008 @10:19PM (#25146355)
    You could also leave your DNS static and use EC2 Elastic IPs to shift things around on the backend (you did mention you were using EC2).
    • Yeah, that's what I don't get. Amazon's Elastic IPs are free as long as there's a host running that they are assigned to. Plus they have an API for re-assigning them on the fly. Just assign them to the front end pound box and be done with it.

  • FreeDNS (Score:3, Interesting)

    by Chabil Ha' ( 875116 ) on Wednesday September 24, 2008 @10:20PM (#25146371)

    FreeDNS [afraid.org] I've been using them for a few years. Updating the DNS info can be done in a single click for all domains. They have a few free update clients, or you can use their API to write your own client.

    • Re: (Score:3, Informative)

      afraid.org will do everything he wants and then some, been using them for over 5 years now with no problems. check it out
  • Unclear (Score:4, Insightful)

    by mcrbids ( 148650 ) on Wednesday September 24, 2008 @10:25PM (#25146411) Journal

    Are you looking for features in a registrar or dns provider? While most registrars also provide DNS service, there's never a requirement that you have to use them. And use them I don't.

    I got good and comfortable with Bind many years ago, and have the DNS administration stuff down pat. I have some really nice administration scripts that manage changes by service. Throw in a few variables, some regex, and some DNS boilerplate definition files, and I get the ability to re-ip a service (EG: websites, email, https, dbserver, etc. ad nauseum) for hundreds of domains in 60 seconds flat if you include updating the actual DNS servers with the changes. (I publish 2, I maintain 5 so that I can quickly switch nameservers in case of hardware/network failure)

    Other than that, I have all my domains linked to two DNS servers by name, and occasionally I have to move a DNS server. It takes a few minutes.

    Is this what you are looking for?

  • ZoneEdit (Score:4, Informative)

    by bziman ( 223162 ) on Wednesday September 24, 2008 @10:39PM (#25146523) Homepage Journal

    I've been using ZoneEdit [zoneedit.com] for years and they're great. Free for small domains, and really cheap for huge domains. It never, ever breaks. And it's super easy to work with.

    • I've been using ZoneEdit for the past 4 years, and I dont remember a single problem with them. It is easy, as you said, and so cheap I feel guilty every time I use them.
      • They did in face have an outage in December 2006. It knocked many folk off the web - even folk who had paid for three servers.

        I use them as a primary and secondary service, but also have 3rd and 4th nameservers elsewhere, also geographically dispersed. It'd take something pretty special to knock them all off line.

    • UltraDNS (Score:3, Informative)

      by pixel.jonah ( 182967 )

      Great infrastructure, robust, API, good people. I've been using them for around nine years now - http://ultradns.com/ [ultradns.com] - highly recommended.

      • Re: (Score:3, Informative)

        by MikeFM ( 12491 )

        I recently switched to UltraDNS for my important domains after a string of problems related to my old providers going down under DDoS attacks. So far it seems good. A little pricey but that doesn't really matter so long as they deliver everything they promise.

        Their support has already proven to be good too - they even answered a question that was more about my registar than DNS serving.

  • I like them, cheap and reliable, plus there's a CPAN module [cpan.org] to interact with them. Personally I would also investigate running your own DNS servers, with Bind a simple run of sed through the text config files and a restart and you're done.
    • with Bind a simple run of sed through the text config files and a restart and you're done.

      Not quite. You would still need to update serial numbers which is very important. I can't think of a simple line of sed that would both update the config itself and the serial numbers in all relevant files.

  • dnsmadeeasy.

    I only know about them because RightScale is using them.

    Of course, when presented with this problem, I took an entirely different approach -- I wrote a DNS-as-REST server in Rails, and then a simple pipeclient-to-REST client/plugin for PowerDNS. The assumption is, it doesn't really have to perform well -- so long as it supports AXFR, you can set up any DNS server (or just about any provider) as a slave.

    • DNSMADEEASY works for me. Reasonable price and excellent service.

    • We've used DNSMadeEasy for quite a few years as well and I find them to be very good service.

      They also support TXT records, which is something that a lot of DNS providers don't do (or don't do well). So we were able to publish SPF records for our domains without much trouble.
  • PowerDNS (Score:3, Interesting)

    by skelly33 ( 891182 ) on Wednesday September 24, 2008 @11:01PM (#25146711)
    PowerDNS [powerdns.com] -> run it yourself with the convenience of doing mass updates in SQL statements instead of maintaining a few dozen zone files on disk. If you think 50 domains is hard, try running several thousand on a shared hosting cluster. You either need scripted automation, or some type of DB-managed solution like PowerDNS. It's by no means the only one like it, but in my experience has worked reasonably well.
  • by Anonymous Coward on Wednesday September 24, 2008 @11:02PM (#25146725)

    Pay a nominal fee to have an ISP slave their big bad never-down DNS servers against your hidden master. Make sure it is set up to allow DDNS updates from your master so there is no lag making the new data public. All you have to worry about is TTL.

    Your server server will not take the load and will not have the uptime requirement as the public servers. You can put just about any DNS software on your server so you can use any API you want there.

  • by ScytheBlade1 ( 772156 ) <scytheblade1@NOsPam.averageurl.com> on Wednesday September 24, 2008 @11:19PM (#25146819) Homepage Journal

    1) Install and DNS server that supports what is technically called 'dynamic updates' and make sure that the updates can be authorized by keys. This server will be internal.

    2) man nsupdate
    Here, I'll even do this step for you: http://linux.die.net/man/8/nsupdate [die.net]

    3) Set the public facing DNS servers to transfer the zones from your internal DNS server.

    4) Tada.

    Using ISC BIND, I've setup my zones in a similar fashion. I configured the zone update authorization to be key based instead of IP based.

    nsupdate uses no special magic, just RFC based standards to allow zone updates. If nsupdate doesn't fit your bill (and it should, it allows you to batch updates and send them), you can roll your own.

    Keep in mind that 'dynamic update' doesn't mean 'low TTL value.' You can set it to whatever you please, it just means that you can updates records without any special zone magic.

  • What the heck? (Score:5, Interesting)

    by davidu ( 18 ) on Wednesday September 24, 2008 @11:35PM (#25146931) Homepage Journal
    I commented on this story in the firehose... what happened to that? [ http://slashdot.org/comments.pl?sid=974977&cid=25145093 [slashdot.org] ]

    I wrote:

    We're working on providing a FULL API to EveryDNS. Slowly, but surely. I've got new folks on board taking over the site to make it finally be the awesome beast it should be. And it'll still be free. I'm also trying to figure out a way to tie this into Pingdom's API since a lot of people already use that for monitoring. :-)

    -davidu

    • Re: (Score:3, Interesting)

      Comments made to articles in the firehose do not make it to the live site. It's like a BRAND NEW firehose.

      • by davidu ( 18 )

        Well that obviously makes a lot of sense. :-)

        Thanks for letting me know.

        -davidu

    • Re: (Score:3, Interesting)

      by netaustin ( 1371373 )

      davidu,

      I actually met you in college at one point; you were a senior, I was a [self involved] freshman, and you gave me some very good advice then too. FWIW.

      Thanks to everyone for all the great advice. I'm going to probably roll with EveryDNS one way or the other out of loyalty to their service which has never let me down.

      And we'll donate our savings from DNSPark.

      We use and love OpenDNS too. If you're ever in New York, I owe you a beer.

      -netaustin

  • Comment removed based on user account deletion
    • I'll second Slicehost. Never used their DNS, but with how right they've gotten everything else, I suspect the DNS will rock.

  • If you are managing that many domains, perhaps its time you, oh, I dunno, ran your *OWN* DNS server?

    • by MikeFM ( 12491 )

      See how well your DNS stays up under a massive DDoS attack when you're running your own little server on a T1 line. I've learned from experience that it sucks.

      • by ledow ( 319597 )

        And the DDoS won't stop the entire service being inaccessible from the outside anyway? DNS is the least of your issues because of DNS caching across the globe. If you're being DDoS'd then you're in trouble anyway... that's not a reason to not run your own DNS or, indeed, to choose an external one. If your DNS host gets DDoS'd, people will still find your IP and get to your services. But if YOU get DDoS'd, there's no service to get to anyway, so it doesn't matter where the DNS is.

        Reliability, reduced sup

      • Who said anything about a 'little server on a T1'? I would suggest colo a box at one of any number of facilities that provide that service, that certainly have more than a DS1.

        And even if he was using a 'little server on a T1', running your own server doesnt mean you can't arrange for slave service from any number of providers around the net, who certainly have more than a DS1.

  • I know your post was asking more about hosted DNS solutions, but if you have a budget to do it right, take a look at Nominum ANS [nominum.com]. Has a great SOAP API and supports zone templates.
  • Zerigo (Score:3, Interesting)

    by zarqman ( 64555 ) <tm@zarq[ ].com ['man' in gap]> on Thursday September 25, 2008 @12:14AM (#25147185) Homepage Journal

    Try Zerigo:NS (http://ns.zerigo.com/ [zerigo.com]). The template feature may be enough to meet your needs. Change one template and every domain dependent on it changes at once.

    If the templates aren't enough, there's also a REST API (brand new, not yet announced on the site, but should be functional).

    Shoot me an email after setting up an account and I'll comp you at least 6mo of whatever level account you need to fit your domains. Be sure to let me know what level account you need.

    To the rest of /. -- I'll comp any of you too: just mention this thread and let me know what account level.

    (Disclaimer: If it wasn't obvious, I am affiliated with Zerigo.)

  • I'll throw DtDNS into the mix, which is the service I have operated for the last ten years. There is no public API aside from the IP update for dyamic hosts/domains, but we have built specific APIs for clients in the past. A "search and replace" function for zones will be available on the web site in the near future as well for mass IP changes.
  • ... DNS servers, using the reliable, secure, high performing, authoritative-only, name server software called NSD [nlnetlabs.nl]. Generate your zone files from a script in your favorite language, and be done with the issues.

  • DNS Made Easy (Score:2, Informative)

    by Bud-froggy ( 807036 )
    I highly recommend DNS made easy: https://www.dnsmadeeasy.com/s0306/res/ddnsc.html [dnsmadeeasy.com] I use them with a bunch of serves on EC2 and it works like a charm.
  • I've been hosting my domains with Enom [enom.com] since over 10 years now, and am very happy with the level of service they provide. Their control panels let you do most anything you need including setting TXT records, and there's an API they provide so you can programmatically make changes too. Very slick.
  • What, precisely, is that supposed to mean?

    Oh, the ol' slip in a M$ jibe to get posted on Slashdot? I thought so.

  • I am surprised nobody I have seen mentions GoDaddy. They don't have a API that I know of, but they have a copy feature that allows you to copy setting(s) from one domain to all the domains. Makes mass updates very easy, and their DNS is rock solid and fast. Plus they are free if you have a GoDaddy account.

    • Re: (Score:2, Informative)

      by sega01 ( 937364 )
      Go Daddy will take down your domain if they hear a peep about it, and cause all sorts of trouble. http://nodaddy.com/ [nodaddy.com] I'd just run NSD and serve them from in-house (maybe get an external VPS as a slave).
  • dyndns.org and your done.

  • by Giant Electronic Bra ( 1229876 ) on Thursday September 25, 2008 @08:04AM (#25149407)

    It isn't all that hard you know...

    And even a pretty busy DNS server doesn't require vast hardware resources. You already obviously have a hosting infrastructure, etc. Bind 9 can serve up a LARGE amount of DNS requests on a couple of fairly low end machines.

    • A bunch of uncoordinated EC2 nodes hardly counts as a "hosting infrastructure".

      EC2 nodes are just that: nodes. They're handy if you want to scale the cluster on-demand, but for a lot of the things people use them, they are more trouble that they're worth.

      I'm quite glad Amazon doesn't offer fixed IPs on EC2, as that would encourage even more of these nonsensical setups.

      • The cost of setting up a couple DNS servers in a couple of different locations is going to be pretty trivial for anything but the very smallest shops. Basically depends on if it is worth the bother and minor expense.

  • EasyDNS does have an API for "Dynamic" IP addresses.

    Their clients are listed here: http://support.easydns.com/dyndns.php [easydns.com]

    And the API is here:
    http://support.easydns.com/tutorials/dynamicUpdateSpecs.php [easydns.com]
    IMarv.

  • Let's look at the facts:

    - You have 50 domains.
    - You're running a multi-layered cluster of web servers on EC2 (why?!)
    - You're (ab)using a free DNS service

    How hard could it possibly be for you to set up ONE conventional dedicated server as the front-end ? You could run your own DNS on there along with Pound/Varnish or whatever perverse setup you think you need. More importantly you shouldn't be using DNS as your node list... just write your own simple scripts to keep track of all your nodes, then you won't

"When the going gets tough, the tough get empirical." -- Jon Carroll

Working...