Join the community today
Register Now

Amazon AWS Cloudflare DNS Cloudflare Automatic IP Failover

Discussion in 'Domains, DNS, Email & SSL Certificates' started by bassie, Feb 10, 2017.

  1. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    Problem is simple.
    DNSmadeeasy doesn't support DNSSEC.
    Route53 doesn't support IPV6.
    Constellix is expensive and not proven yet.
    Coudflare as DNS only, doesn't provide Automatic IP Failover.

    As you can see, almost every DNS provider is missing something.
    You can't add IPV6 support or DNSSEC by yourself... but...

    It seems quite simple to add Automatic IP Failover to Cloudflare's DNS.
    The question is. Is it worth it or is there another solution, provider, setting etc etc.
    Please share your opinion, experience, solution or anything you've got guys. The above is an example. I am open to everything.
     
    Last edited: Feb 10, 2017
  2. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    Well only way to see if Constellix is up to the task is use it :)

    Cloudflare yes can do auto failover for DNS via API and scripting Cloudflare API documentation v4.

    But later on Cloudflare will have Traffic Manager which allows DNS level failover, health checks and load balancing https://community.centminmod.com/threads/cloudflare-traffic-control-traffic-manager.8944/ currently in private beta at API level only (non-GUI)

    FYI, Route53 doesn't support DNSSEC either :(

    I use DNSMadeEasy and Route53 as I don't use IPv6 or DNSSEC right now. Makes DNS failover easier :)
     
    Last edited: Feb 12, 2017
  3. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    @eva2000 Still using Constellix?
    About Route53, is it true that they now support ipv6?
     
  4. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah testing Constellix for test domain - testing is only way to know :)

    AWS | Amazon Route 53 | FAQs

     
  5. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    • Informative Informative x 1
  6. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    still free for me haven't paid a cent yet
     
  7. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    Lucky bastard :)
    As DNSmadeeasy consumer you still can test it for free ??
     
  8. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    yeah it seems so :)
     
  9. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
  10. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    Constellix is official since the first of May.
    @eva2000 still using Constellix?
     
  11. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    yup started charging now and yes still using Constellix for testing their Geo DNS/Geo Proximity DNS... though with Cloudflare's Load Balancer/Traffic Manager now in place, it sort of changes things especially if I opt for free or pro cloudflare plan which is cheaper than business. But the DDOS protection aspect always has me defaulting back to my current setup for the price :)
     
  12. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    @bassie at least Constellix taking care of early beta testers somewhat

    upload_2017-5-9_9-26-3.png
     
  13. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
  14. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    What do you think you are going to pay per domain?
    1 domain zone = $5.00
    1 domain GTD (Global Traffic Director) = $5.00
    Sonar check for failover ....... $?
    PRICE / MONTH

    Minimum $10?
     
  15. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    Pricing is at Constellix | DNS Pricing additional domain zone and/or GTD enabled domain price is cheaper

    For me it's around US$13/month and then minus 50% for Geo IP Filter/Proximity until 2018

    they have an example on bottom of pricing page too
     
  16. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    Thanks for your answer.
    My main problem with DNSmadeeasy is DNSSEC.
    Without DNSSEC i can't enable and use DANE.

    DNSSEC is on the list for a long time if there is an animo, But because DNSmadeeasy added CAA support quite recently, I don't believe DNSSEC is still coming in the near feature.

    Their new main event is Constellix.
    So it seems to me that they won't invest in the old one, other than security related fixes.

    I doubt what I have to do because I do not use GEO DNS.

    Constellix is a lot more expensive when using DNS + Sonar for IP fail-over in compare to DNSmadeeasy.
    Does anyone have any tips?
     
    Last edited: May 13, 2017
  17. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
    If you don't need DDOS protection, then cloudflare's load balancer and geo-steering would probably be cheaper if you have less than 4 origins to failover to. You might need to break out a calculator work out your fail over requirements and costings for dnsmadeeasy, constellix, aws route53 and cloudflare load balancer/failover.
     
  18. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM
    Route53 finally supports IPV6? and DNSSEC?
    I am also going to look at Azure DNS :)
     
  19. eva2000

    eva2000 Administrator Staff Member

    30,178
    6,785
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,138
    Local Time:
    5:20 AM
    Nginx 1.13.x
    MariaDB 5.5
  20. bassie

    bassie Active Member

    535
    116
    43
    Apr 29, 2016
    Ratings:
    +348
    Local Time:
    9:20 PM