HN Explorer

Q: Why do so many major services (ex Twitter) use ONLY a single DNS provider?

9 points by danyork ↗ HN
I don't get it... why do so many major Internet services such as Github, Twitter, SoundCloud and more use only a SINGLE provider of DNS hosting for their DNS records? It used to be that you always made sure you had a second provider doing "secondary DNS" for you. Have people just forgotten this common practice? Or are there other reasons I'm missing?

7 comments

[ 2.9 ms ] story [ 24.8 ms ] thread
trelliscoded
Probably because they're worried about keeping two providers in sync throughout the entire world, or they don't have a DNS wizard on staff.

I don't see why sync would be a huge problem; these days moving services usually involves slowly draining active connections from the old addresses while new connections go to the new address. If it takes a day for all the clients to move to the new address then fine, the migration just takes longer.

stevekemp
Probably because until the recent outage it worked well enough; and because a lot of the bigger providers encourage lock-in via their own geographical-options.

Uploading records to multiple providers, via APIs, isn't so hard, but it's something most people don't realize they need until it is too late - or viewed as something that isn't required due to end-user caches.

danyork
Thanks. Someone else pointed out to me that some of the advanced features offered by DNS providers, particularly around geographic redirection, is something that is not standardized between providers and so can't be easily duplicated. I can see that - and understand why it would cause you to use only one provider if that was a service you found of value.
malisper
In hindsight, it's obvious that everyone should use multiple DNS providers. DNS failing has almost never been an issue before, so it's something that a lot of companies didn't expect and were unprepared for.
danyork
Thanks. Yes, as you say, it's obvious now... but when you consider that each of those DNS providers has their own globally distributed network involved many servers (via anycast), you can understand why people think that one provider is enough.
[dead] sirmiller
Having multiple authorative servers for static DNS records is easy.

Doing what Dyn does (e.g. geo load balancing, active failover, cdn integration) is insanely hard. Syncing that across multiple providers is next to impossible.

Also we should stop blaming Dyn for what happened. a) They reacted very fast and correct to the attack. b) First analysis shows that it was mostly Level3 that was overloaded.