Operations | Monitoring | ITSM | DevOps | Cloud

No Sandwich, No Security: What This Week's Lunch Taught Me About DNS Blind Spots

Like many shoppers in the UK this week, I found myself staring at half-empty shelves in my local grocery store. In a small but frustrating twist, my usual sandwich, chicken mayo on malted bread, was nowhere to be found. The disruption wasn’t just about lunchtime preferences; it was part of a broader impact from cyberattacks that hit major UK retailers, including Co-op and Marks & Spencer.

Understanding Reverse DNS Lookup

On the information superhighway, an IP address is a series of numbers telling the location of a digital resource, similar to having a street address for a building. However, when all you know is the street address, you have no idea what the building itself looks like. If you’re a visual person, you might insert that address into Google Maps to pull up a picture of the building so you have a marker to help find a drive.

It was DNS Again: Why Your Status Page Needs Its Own Domain

On February 20, 2025, at 16:22 UTC, StatusGator detected an outage affecting Vultr. The issue appeared to stem from a DNS failure, causing vultr.com and any other services hosted on its domain to become inaccessible. But what does that include? The official Vultr status page. Because Vultr hosts its status page on status.vultr.com, the same domain hosting its primary website and dashboard, users were left without an official source of updates during the outage.

Understanding Root Cause: Domain Name Systems (DNS) and Traceroute

You can think about a website the same way you think about your car. Every time something breaks, a professional—an engineer or a mechanic—usually charges a high amount for the fix (isn’t it annoying when you can’t tell if it’s a big or small fix?). Alternatively, you can learn some basics, get a few inexpensive tools, and troubleshoot many of the immediate issues yourself.

Managing External-DNS & cert-manager with Komodor

Recently we’ve explored the evolving role of Kubernetes as a full ecosystem, rather than just a platform, diving into the power and complexity of add-ons. These tools, as highlighted previously, are key to augmenting Kubernetes core capabilities, and adding-on (as their name implies) essential capabilities not supported directly by Kubernetes itself.

Mastercard's DNS Misconfiguration: Lessons Learned and How DNS Spy Can Help

In January 2025, security researchers uncovered a critical DNS misconfiguration involving Mastercard. For nearly five years, one of Mastercard’s DNS records pointed to the incorrect domain "akam.ne" instead of the intended "akam.net." This error, caused by a simple typographical mistake, created a vulnerability that could have allowed malicious actors to intercept or redirect traffic.

What is a load balancer? And how does it help handle network traffic?

A load balancer, also known as Global Server Load Balancing (GSLB), is the method of splitting and distributing the incoming network traffic to multiple hosts—which can be located at different geo locations—within the organization network. This helps the network effectively manage network traffic and prevent any delays in network services. With load balancing enabled in the hosts, the organization’s network services are faster and provide more reliable responses to clients.

What is a DNS zone transfer? And how does it simplify transferring zone files from primary to secondary servers?

A DNS zone transfer is the process of transferring DNS records and zone files data from the primary server to the secondary server. This updates the secondary server with the current records and zone files so that it can act as a backup during failover scenarios. Zone transfer extends network services when the primary server fails by copying the primary server’s files to the secondary server.