Iām currently re-evaluating the idea of offering crawled nodes via a DNS server.
My main concern is the vulnerability of DNS itself. DDOS and SYN flood are pretty easy and seem very costly to mitigate.
Iām going to explain my thoughts referring to an article for a Cloudflare (CF) product called virtual DNS.
This blog article is a good read to get an idea how vulnerable DNS is in general.
The main problem Iām seeing is that the DNS serverās IP-address is very easy to detect and thus vulnerable to DDOS attacks. Virtual DNS, as offered by CF, would hide that IP-address and the attacker would āonlyā be able to attack the CF DNS frontend. The nubits-seeder DNS server would be (nearly) hidden in the network.
Iāve contacted CF to get an offer for their virtual DNS package which would provide proper DNS protection. Sadly, I donāt think this is going to be cheap.
A cheaper, maybe intermediate, solution could be offering the IP-table as a JSON file via HTTP.
Creating a small script that queries a local (not publicly available) DNS server and saves the data into a JSON should be quite easy to create. Thatās about the additional development that would be required.
Reasoning:
-HTTP traffic is easily and cheaply (starting at 0$ / month) routable via CF-like services (CDN)
-IP of origin HTTPD is hidden by the CDN
-Easier to decentralize, due to low (lower) infrastructure costs
-Caching for the tables is available
-Performance increase
NuDroid / Nud would need a routine that reads the JSON and then makes the connection attempts.
Iām currently discussing with @MatthewLM how hard that would be to implement into NuDroid.
Thoughts?
