Geographically Redundant DNS is now available

Published July 20th, 2011 by Keiran Holloway

Up until recently we’ve done all DNS hosting locally in Australia on our multi-homed network.

Historically, this has been more than satisfactory for the vast majority of our clients. When the DNS is, for the most part, only pointing to other hosts on your own network then there isn’t a huge amount of gain from having DNS servers on the other side of the world pointing all the records back to the Australian hosts on the Anchor network.

In recent times this has changed somewhat with us getting involved in the remote management of hosting services around the world. With that in mind, announcing our US-based authoritative nameserver:

ns3.anchor.net.au

This host is being provided in addition to our existing name servers (ns1.anchor.net.au & ns2.anchor.net.au) and is available for all clients at no additional cost. We would encourage that all clients who have services hosted on networks remote from our primary point of presence in Sydney add this to their DNS configuration immediately.

Any questions? Please do not hesitate to get in contact with our support team via support@anchor.com.au or 1300 883 979.

0
Comments

Implementing proper trust relationships in backup systems

Published June 21st, 2011 by Keiran Holloway

As many people may have read today, a certain web hosting company which operates in Australia suffered an attack which resulted in significant amounts of data loss. Not only was their live production data lost, but all backups were also unrecoverably lost in the process.

Whilst significant technical details have yet to be released as to the nature of these attacks, now is an opportunity as good as ever to explain how the trust relationships exist between the backup server and the system being backed up across our entire server infrastructure.

Our backup servers are separated with there being a minimal trust relationship between the backup server and the system being backed up:

  • All backups happen on an independent network which is inaccessible from the Internet.
  • The backup server can only read data from the machine being backed up (and not alter it).
  • The machine being backed up can only send new data and not alter the data that is already backed up.
  • Using this methodology should protect any attacks from the public, customer facing servers from damaging the independently stored backups.

    0
    Comments

    News flash: widespread power outage hits Sydney CBD, Anchor hosting operations unaffected

    Published March 31st, 2009 by Barney Desmond

    Sydney suffered a nasty power outage in the CBD on Monday, which according to reports affected tens of thousands of homes and businesses. Curiously, some traffic lights on George street were blacked out while others just a block or two away were working fine. From a technical standpoint, a measure of diversity like that is probably a good thing. Rather than having vast areas with unmanaged traffic flow, police could be deployed where necessary, with the knowledge that vehicles could move a meaningful distance before getting stopped at the next set of blacked-out lights.

    A friend of one staffer at Anchor was expected to be staying back late last night babysitting the systems in their office that would take some time to come online. Meanwhile over at Anchor’s datacentre, things were humming along nicely without a blip. Globalswitch, our infrastructure provider, has multiple diverse power feeds to cover all equipment, along with redundant power and cooling capacity. In the event of a catastrophic supply failure, diesel generators are on standby to keep things running.

    The Anchor NoC was also unaffected; we’ve got big EVA batteries to tide us over. Sure, they’re no competition to a GN drive, but our power requirements are somewhat more modest than a ’004 Nadleeh in Trans-Am mode, so it’s not really an issue (don’t believe any vendor who tries to tell you otherwise, crunch your numbers first!).

    eva-clock2

    While we’re on the topic of backup power, it seems the CBD’s emergency warning systems don’t have backup power either. I’m not interested in making a call as to whether they should or shouldn’t have backup power, but from a public perspective it sure doesn’t look good on a service that’s meant to function in an emergency.

    When deploying an “important” system, an appropriate level of consideration needs to be given to how you’re going to keep that system running; a point that we see missed all too often. Expecting a system to work continuously without fail is … well, doomed to fail, if you don’t have the corresponding redundant systems and fault rectification capabilities in place – standard on all Anchor web hosting, naturally. :)

    I’m just happy that power at my house wasn’t affected – I had a lot of interesting browser tabs open, y’know.

    “Mr Rees has told Parliament the shutdown of the three other power cables went to plan and 99.4 per cent of Sydney’s public transport services ran on time.”

    Huh. Reliability went up as a result of the outage, eh.

    0
    Comments