burble.dn42/www
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

update maint. log
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Simon Marsh 2021-04-03 22:48:51 +01:00
parent 320ce79d38
commit 239e3bbdd7
Signed by: burble
GPG Key ID: 0FCCD13AE1CF7ED8
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
site/content/additional/maintlog/_index.md
View File

@ -7,6 +7,28 @@ A log of changes to the burble.dn42 network.
---
## 3rd April 2021
The collector is now using a TLS certificate issued by the
[DN42 ACME](https://acme.dn42) service. The collector is behind an anycasted
reverse proxy, so a normal ACME challenge will not work. Instead, the certificate
is managed using
[dnscontrol](https://stackexchange.github.io/dnscontrol/) to respond to
an ACME DNS challenge.
DNSSEC has been enabled on all edge nodes.
## 2nd April 2021
There was a major DNS outage today as a minor change took out the entire service.
What should have been a trivial config change actually upgraded the container
from Alpine 3.11 to Alpine 3.13 and caused a number of the DNS applications to
stop working due to incompatibilities.
The lack of working DNS meant it was more complicated to bootstrap the service
back again, leading to a long delay in restoring service.
## 27th March 2021
Fixed a bug in bird that was preventing MRT dumps from the collector working.