Group items tagged

Filter: All | Bookmarks | Topics Simple Middle

Introducing CNAME Flattening: RFC-Compliant CNAMEs at a Domain's Root - 0 views

blog.cloudflare.com/liant-cnames-at-a-domains-root

dns networking

shared by 張旭 on 15 Mar 22 - No Cached

you can now safely use a CNAME record, as opposed to an A record that points to a fixed IP address, as your root record in CloudFlare DNS without triggering a number of edge case error conditions because you’re violating the DNS spec.
...

Cancel
CNAME Flattening allowed us to use a root domain while still maintaining DNS fault-tolerance across multiple IP addresses.
...

Cancel
Traditionally, the root record of a domain needed to point to an IP address (known as an A -- for "address" -- Record).
...

Cancel
...13 more annotations...
WordPlumblr allows its users to use custom domains that point to the WordPlumblr infrastructure
...

Cancel
A CNAME is an alias. It allows one domain to point to another domain which, eventually if you follow the CNAME chain, will resolve to an A record and IP address.
...

Cancel
For example, WordPlumblr might have assigned the CNAME 6equj5.wordplumblr.com for Foo.com. Foo.com and the other customers may have all initially resolved, at the end of the CNAME chain, to the same IP address.
...

Cancel
you usually don't want to address memory directly but, instead, you set up a pointer to a block of memory where you're going to store something. If the operating system needs to move the memory around then it just updates the pointer to point to wherever the chunk of memory has been moved to.
...

Cancel
CNAMEs work great for subdomains like www.foo.com or blog.foo.com. Unfortunately, they don't work for a naked domain like foo.com itself.
...

Cancel
the DNS spec enshrined that the root record -- the naked domain without any subdomain -- could not be a CNAME.
...

Cancel
Technically, the root could be a CNAME but the RFCs state that once a record has a CNAME it can't have any other entries associated with it
...

Cancel
a way to support a CNAME at the root, but still follow the RFC and return an IP address for any query for the root record.
...

Cancel
extended our authoritative DNS infrastructure to, in certain cases, act as a kind of DNS resolver.
...

Cancel
if there's a CNAME at the root, rather than returning that record directly we recurse through the CNAME chain ourselves until we find an A Record.
...

Cancel
allows the flexibility of having CNAMEs at the root without breaking the DNS specification.
...

Cancel
We cache the CNAME responses -- respecting the DNS TTLs, just like a recursor should -- which means often we have the answer without having to traverse the chain.
...

Cancel
CNAME flattening solved email resolution errors for us which was very key.
...

Cancel

How to Set Up Squid Proxy for Private Connections on Ubuntu 20.04 | DigitalOcean - 0 views

www.digitalocean.com/...up-squid-proxy-on-ubuntu-20-04

networking squid proxy

shared by 張旭 on 29 Apr 22 - No Cached

it’s a good idea to keep the deny all rule at the bottom of this configuration block.
...

Cancel

張旭 on 29 Apr 22

"it's a good idea to keep the deny all rule at the bottom of this configuration block."

<div class="cArrow"> </div><div class="cContentInner">"it's a good idea to keep the deny all rule at the bottom of this configuration block."</div>

...

Cancel

About Kubernetes Ingress - 0 views

projectcalico.docs.tigera.io/...about-kubernetes-ingress

ingress networking

shared by 張旭 on 20 Jan 22 - No Cached

Creating Highly Available clusters with kubeadm | Kubernetes - 0 views

kubernetes.io/...high-availability

kubernetes system cluster

shared by 張旭 on 17 May 21 - No Cached

If instead, you prefer to copy certs across control-plane nodes manually or using automation tools, please remove this flag and refer to Manual certificate distribution section below.
...

Cancel
if you are using a kubeadm configuration file set the podSubnet field under the networking object of ClusterConfiguration.
...

Cancel
manually copy the certificates from the primary control plane node to the joining control plane nodes.
...

Cancel
...1 more annotation...
Copy only the certificates in the above list. kubeadm will take care of generating the rest of the certificates with the required SANs for the joining control-plane instances.
...

Cancel