Spaceship DNS are down! reddit / selfhosted ---------------------------------------------------------------------- xDuckBoy · 2023-10-12 09:36 subj. All my sites are down... Since 2001, this is the first time I've encountered any registrar having such problems. Although I have used a lot of them. Guys, can anyone tell me why this happened and maybe it makes sense to look for another registrar? ---------------------------------------------------------------------- NikStalwart · 2023-10-12 09:47 > Guys, can anyone tell me why this happened and maybe it makes sense to look for another registrar? You don't need a new registrar for this. You can point your domain to any nameservers you like - for instance, you can pay $6/year/domain and host with AWS and get almost unparalleled DNS uptime, or you can use CloudFlare for or any number of dedicated DNS providers out there. ---------------------------------------------------------------------- hucknz · 2023-10-12 10:00 You’re doing well, this is the second time this week I’ve heard of a registrar having DNS issues. My advice would be to split up your jobs. Let registrars do their thing and DNS providers do theirs. Many registrars do DNS because of sales (“includes free DNS hosting!”) type stuff, it’s not generally the main focus of their business. Cloudflare have a great free service. AWS, Google, Microsoft and a bunch of others also have good DNS servers you can pay for. ---------------------------------------------------------------------- xDuckBoy · 2023-10-12 10:04 Thanks for the helpful advice and support! ---------------------------------------------------------------------- jusepal · 2023-10-12 10:17 Host your dns somewhere else. Buying domain with a registrar doesn't necessarily mean you also got to use their nameserver. Most of the time registrar dns is just an afterthought, not their main concern. Maybe except for registrar like cloudflare or amazon route53. Anyway i also got a few domains from spaceship but it hosted the dns at desec.io ---------------------------------------------------------------------- NikStalwart · 2023-10-12 10:20 Some registrars (notably Porkbun and Sav) used to use Cloudflare's nameservers as upstream, not sure if they still do that. But, as I said in my own reply, I agree that registrar DNS is crap. And Premium registrar DNS is a rort. ---------------------------------------------------------------------- NikStalwart · 2023-10-12 10:22 > “includes free DNS hosting!” Worse are the registrars who market "Free SSL certificates!" and then have you download the Let's Encrypt certificates they generate for you.... manually. ---------------------------------------------------------------------- Nassiel · 2023-10-12 10:53 Route53 + terraform and you'll live much better ---------------------------------------------------------------------- [deleted] · 2023-10-12 11:51 [removed] ---------------------------------------------------------------------- reklis · 2023-10-12 15:43 Who has the best dns hosting these days? ---------------------------------------------------------------------- xDuckBoy · 2023-10-12 17:08 I've updated the startpost ---------------------------------------------------------------------- xDuckBoy · 2023-10-12 17:09 Cloudflare i presume ) ---------------------------------------------------------------------- TryHardEggplant · 2023-10-12 22:51 Another positive of hosting your DNS through AWS or Cloudflare or another provider with API access is the ability to provision LE certificates with DNS challenges. DNS challenges allow you to provision certificates with complex SAN values and wildcard certificates easily with certbot or other LE tools. ---------------------------------------------------------------------- NikStalwart · 2023-10-12 23:54 > another provider with API access is the ability to provision LE certificates with DNS challenges. Hear hear. Technically speaking, you don't even *need* API access, so long as your provider is capable of doing AXFR / slave zones. DNS-01 will follow CNAME redirects, so all you need to do is CNAME your domains to a central verification zone, update that zone with something hacky and either expose it directly (not recommended, Let's Encrypt does multi-perspective validation so it is hard(er) to properly firewall) or use it like a 'hidden master' and have a public slave pull your zone. But, this may be overly complicated, because most providers who will support slave zones will support API access most likely. ---------------------------------------------------------------------- hucknz · 2023-10-13 00:10 Free? Cloudflare. Paid? AWS Route53 probably. ---------------------------------------------------------------------- desqviewX · 2023-10-14 15:19 Cloudflare is much better than Route 53, IMO. I actively try to avoid R53 wherever possible, it's a mess. ---------------------------------------------------------------------- hucknz · 2023-10-15 01:41 Yeah, I use Cloudflare for all my stuff. Best is subjective, I only say Route 53 as we’ve used it to run large scale (1m+ MAU) applications on it and a big chunk of the internet runs through it. For home use it’s massive overkill.