Hacker News Reader

I think there is some lack of technical knowledge with the people who are running wikileaks as they are still using the same free dns service with a new domain rather than switching to another dns that might be able to handle their traffic (DDOS) with a known domain name.

(everydns.net is the dns service they are using)

View on HN

Since moving a host to another IP address practically requires temporarily setting a low TTL (which may have been what actually caused the DDoS), creating an entirely new domain with a high TTL is a reasonable (albeit desperate) attempt to reduce the load on the authoritative nameserver. I doubt it's a lack of technical knowledge as much as it is lack of resources in what amounts to a perfect storm (hot potato content, inherent DNS weakness, scalability during surge of popularity, etc.).

I was coupling it with the fact that they used the same dns service that previously dropped them.

Reply on news.ycombinator.com