Tell HN: Cloudflare down – Error 1016 – Origin DNS error

Related to Heroku, but not sure if Heroku or Cloudflare is the root cause: https://news.ycombinator.com/item?id=32572906.

x@x  ~  dig substack.herokuapp.com @8.8.8.8

; <<>> DiG 9.18.5 <<>> substack.herokuapp.com @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 10302 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;substack.herokuapp.com. IN A

;; Query time: 213 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP) ;; WHEN: Tue Aug 23 18:28:22 -05 2022 ;; MSG SIZE rcvd: 51

Seem like Heroku is having some issue or heroku dns records disappeared

Yep, can’t work because Substack is down. The risks of living in the cloud

And…

Cloudflare protects this website

But, something went wrong trying to reach it If the problem isn’t resolved in the next few minutes, it’s most likely an issue with the web server you were trying to reach.

Cloudflare is a global network that secures websites, applications, remote teams, and networks. We help build a better internet through a focus on security and speed.

also seeing some issues ...

If you still have this issue, here's the fix:

1. Go to your Heroku app, copy the DNS-target for your apex (root) domain (the one that looks like "stark-horse-mrp4jeowu9yvwpnnma32x6hd.herokudns.com")

2. Go to https://www.nslookup.io/, put the DNS target

3. Go through all 5 tabs at the top (Cloudflare, Google, Authoritative) - wherever i you see "A" records - I could only see them in "Authoritative"

4. Copy first A record

5. Go to CloudFlare, replace the flattened CNAME / A record you have for your apex domain with this A record IP you copied

6. Your website should work now, but do the same with the other A records you found as well

7. You should probably revert back to whatever you had in Cloudflare, as soon as Heroku is back up

It's back up

x@x  ~  dig substack.herokuapp.com @1.1.1.1

; <<>> DiG 9.18.5 <<>> substack.herokuapp.com @1.1.1.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1680 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;substack.herokuapp.com. IN A

;; ANSWER SECTION: substack.herokuapp.com. 2 IN A 18.211.231.38 substack.herokuapp.com. 2 IN A 54.205.8.205 substack.herokuapp.com. 2 IN A 54.235.77.118 substack.herokuapp.com. 2 IN A 174.129.128.48

;; Query time: 120 msec ;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP) ;; WHEN: Tue Aug 23 21:17:48 -05 2022 ;; MSG SIZE rcvd: 115

This is so funny about cloudflare, I bet most their customers don't know their origin is exposed, when offline, by default.

[dead]