How GoDaddy Brought Down Millions of Sites – and How to Avoid Being a DNS Outage Casualty

How GoDaddy Brought
Down Millions of Sites –
and How to Prevent
Becoming a DNS Outage
Casualty
Yottaa Inc.
101 Summer Street
Boston MA 02110
http://www.yottaa.com

© 2010 - 2012 Yottaa Inc. All Rights Reserved.
© 2010 - 2012 Yottaa Inc. All Rights Reserved. Company Confidential

GoDaddy Outage

• Outage started around 1pm ET on Sept 10 2012
• Resolved around 7pm ET on Sept 10 2012
• Lasted about 6 hours
• Impact:
• ALL sites being hosted by Internet domain registrar GoDaddy were down
• 45 million domains registered on GoDaddy…

© 2010 - 2012 Yottaa Inc. All Rights Reserved. Company Confidential 2

What Happened?

GoDaddy DNS servers failed to resolve DNS requests…

All GoDaddy registered domains use GoDaddy DNS servers by
default.


What Caused It?
Hacktivist
@Anonymous Own3R
quickly claimed
responsibility


Who Is Anonymous Own3r and Why?
'Anonymous' typically announces
their attacks on twitter and
Facebook before hand, especially
DDOS attacks.

For example, in August, Anonymous
brought down many EU government
websites to protest for WikiLeaks
founder
Who is Anonymous?
We are Anonymous, We are legion, We
never forgive, We never forget, Expect us.

• A global hacktivist group
• Twitter handles:
• @youranonnews, @anonymous
• Site:
• http://youranonnews.tumblr.com/


Who Is Anonymous Own3r and Why?


What Caused It (Again)?
Official statement from GoDaddy on September 11th:

“We have determined the service outage was due to a series of
internal network events that corrupted router data tables”

The service outage was not caused by external influences. It was
not a “hack” and it was not a denial of service attack (DDoS).

Throughout our history, we have provided 99.999% uptime in our
DNS infrastructure. This is the level our customers expect from us
and the level we expect of ourselves. We have let our customers
down and we know it.

- Scott Wagner
Go Daddy Interim CEO


What? Not Me?


What Is DNS?
• DNS, Domain Name System, is the most fundamental building block of the
Internet
• The Internet will not function without DNS

• DNS is responsible for translating domain names into IP addresses
• Human beings work at domain name level – you don’t remember a website
by its IP address
• Internet routing system only work at IP address level – it knows nothing
about domain names
• Connecting between the two is DNS:
• DNS translates human understandable domain names into IP
addresses

• DNS is hierarchical
• It is a large distributed database for all Internet records
• Organized as a tree structure
• Your domain is a node on that tree


Your Domain and the Internet

Root
Root level

.com .org .net .uk … Top level

mycorp.com 2nd level

www Blog mail Boston … 3rd level

4th level
www ….
Your Domain Records


How DNS Name Resolution Works
• DNS Server (name server) Is the glue
for the entire Internet;
• Each level can have its own DNS server
• Maintains its own records
• Answering calls at this level

Source: http://www.windowsitpro.com/content/content/48527/Figure_01.gif

How Do You Manage Your Domain Records?

• Your can host your domain
DNS records using any DNS
service Root
• Domain registrars provide Root level
the default ones
.com .org .net .uk …
Top level

mycorp.com
2nd level

www Blog mail Boston … 3rd level

www …. 4th level

Your Domain Records


Why and How to Choose A
DNS Service


Your Domain’s DNS Server
• When you register your domain name
• GoDaddy automatically set up GoDaddy DNS server for your domain

• When someone visits a website
• The browser will ask the name server of the domain “who is this domain
name”?
• Name server will answer the IP addresses of the domain name
• The browser gets the address and connects to it
• The visitor sees the returned web page

• When someone sends you an email to yourname@yourcompany.com
• The sender will ask the name server “where is the mail server for
yourompany.com?”
• Name server will return the IP address (“MX” record)

DNS failure means the failure of your entire domain


DNS Service - What To Look For
• Geographic distribution?
– Single location?
• Reliability
– Multiple location?
• Performance
– Global locations?
• Security
• IP Anycast?
• Security
– DNS attack prevention?
• Easy of use UI


DNS and Network Stack

A DNS query is carried on the TCP/UDP stack, typically over UDP. It is
routed as typical TCP/UDP packet

Source: http://i.technet.microsoft.com/dynimg/IC198104.gif


IP Anycast
• Multiple locations
are needed for
Anycast
• Each location share
the same Anycast
IP address
• Internet Routing
(BGP) chooses the
closest location


DNS Spoofing


DNS DDOS Attack

DNS Server


Yottaa Global DNS Service
Enterprise-class Anycast DNS network for free


Global DNS for Speed & Scale
Yottaa DNS
Features:
• Global IP anycast
• Globally distributed
data centers
Web
Optimization
Network
• Globally redirects request
to closest geographic server
Benefits:
• High performance DNS service
• Enterprise-grade traffic
management
• DNS Shield for protection

Yottaa Anycast Network

Europe
North America
Amsterdam
Dublin
Seattle Chicago
Frankfurt
San Francisco Ashburn London Asia
San Jose New York
Madrid Paris
Washington, DC
Los Angeles Tokyo
Atlanta Hong Kong
Miami Osaka
Dallas

Singapore

South America

Australia
Sao Paulo
(Coming)

Sydney’

22

Yottaa DNS UI


Don’t let your website fail you

To Make Your Website Fast, Reliable and Secure

Visit: www.yottaa.com

For More Information Contact:

Coach Wei
Email: coach@yottaa.com
Phone: +617.896.7818
Web: www.yottaa.com
Twitter: @yottaa
24
© 2010 - 2012 Yottaa Inc. All Rights Reserved.
© 2011 Yottaa Inc. All Rights Reserved. Company Confidential

How GoDaddy Brought Down Millions of Sites – and How to Avoid Being a DNS Outage Casualty

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (16)

Semelhante a How GoDaddy Brought Down Millions of Sites – and How to Avoid Being a DNS Outage Casualty

Semelhante a How GoDaddy Brought Down Millions of Sites – and How to Avoid Being a DNS Outage Casualty (20)

Mais de Yottaa

Mais de Yottaa (18)

Último

Último (20)

How GoDaddy Brought Down Millions of Sites – and How to Avoid Being a DNS Outage Casualty