DNS Tunneling and Egress Control: Closing the Channel That Almost Always Works
DNS Tunneling and Egress Control: Closing the Channel That Almost Always Works When an egress firewall blocks outbound traffic to the internet, ther…
Architecture
⚑ Report a ProblemLatest Architecture news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
news
opensource
performance
productivity
programming
python
react
security
showdev
softwareengineering
systemdesign
tutorial
typescript
webdev
9.8 Windows DNS RCE: 3 Triage Checks Before It Repeats SigRed
Microsoft's September Patch Tuesday landed a record-setting pile of roughly 970 new CVEs, and two of them are already being exploited. Buried in tha…
DoH JSON from the browser: 5 ways Cloudflare and Google differ
Two public resolvers answer DNS queries over HTTPS in JSON: Cloudflare at https://cloudflare-dns.com/dns-query and Google at https://dns.google/reso…
Media Mail Cutovers: Wildcard DNS, Customer Verification, and Tenant Records
A media publisher cannot treat domain onboarding as complete when a page loads. Newsletters, alerts, and contributor mail also need SPF, DKIM, and D…
Customer Support DNS: Migrate a Zone with 4-Gate Diff Before Nameservers
The page arrives after a customer changes nameservers: their support portal passes ownership checks, but mail for the same domain no longer behaves…
DNS Record Write Rejected Because Zone ID Is Not Domain Name — Validation Debug
Short answer: when a DNS record write is rejected because a zone ID is not a domain name, resolve the opaque reference first, canonicalize the retur…
Manage Internal DNS Hostnames from Infrastructure Code in 4 Deploy Steps
TL;DR: Keep stable internal DNS records in the infrastructure repository, upsert them during deployment, then read them back and fail the deployment…
4 Failure Modes of TXT Record Domain Ownership Verification in FastAPI Onboarding
Before writing any verification code, settle one thing about the customer's DNS: does your platform hold the zone, or does the customer? For a devel…
E-Commerce DNS Zones: Enumerate, Diff, Apply, and Verify in Node.js
Short answer: list the live DNS records, save that original snapshot, diff it against the intended set, upsert only the differences, and verify the…
Why DNS Had to Exist: The Directory Problem Explained From First Principles
The Directory Problem: Why DNS Was Inevitable Software Laws from First Principles — Investigation 009. This picks up directly from Identity ≠ Locati…
The Domain Was the Containment Unit. ICANN Is Reconsidering That.
For two years, domain accountability in DNS abuse enforcement has effectively meant one report, one domain, one mitigation decision. That's the prac…
Networking Basics: IP Address ও DNS
চলুন একটা সহজ উদাহরণ দিয়ে শুরু করি, যেটা আমরা রোজকার জীবনে ফেস করি। ধরুন, আপনি প্রথমবার আপনার বন্ধুর বাসায় যাচ্ছেন। তখন আপনি কী বলবেন — "আমি আমার…
ISC BIND 9.18.42 Released: Major Milestone for DNS Security
ISC BIND 9.18.42 Released: Major Milestone for DNS Security Meta: ISC’s BIND 9.18.42 hit the open‑source stage on November 5, 2025, delivering a sui…
Debugging VPN DNS Problems: Find the Layer That Is Actually Answering
When DNS starts behaving strangely—a site resolves differently than expected, a recent change does not appear, or two devices disagree—the VPN often…
DNS Records Explained: A, AAAA, CNAME, MX, TXT, NS, and SRV Records in Modern Internet Infrastructure
In the previous article , we explored how DNS translates human-friendly domain names into machine-friendly IP addresses and how a request travels th…
DNS Propagation Time: How Long Until Your DNS Change Goes Live?
You change the A record for api.example.com from 203.0.113.10 to 203.0.113.20`. Your browser shows the new IP. The deployment dashboard says green.…
Wildcard DNS Records: Uses, Risks, and Best Practices
A single DNS record can answer for an unlimited number of subdomains. Add one wildcard entry, and suddenly anything.yourcompany.com , literally-anyt…
Move Your WordPress.com Domain to Cloudflare and Halve the Renewal
This post was originally published on Techucation , my blog at malcolmlow.com. Cross-posted here for the dev.to community. My WordPress.com domain r…
Как перестать зависеть от Cloudflare в DNS и не выстрелить себе в ногу
DNS — это та штука, которую замечаешь только когда она падает. Весь твой трафик, почта, сертификаты, доступ к админкам — всё висит на том, что кто-т…
The Anatomy of a 30-Point Security Audit (And Why Every Domain Needs One)
Most domains have between six and ten security misconfigurations that their owners do not know about. Not because the owners are careless. Because D…
Сети База для начинающих
Микросервисы запускаются, контейнеры оркестрируются, а сеть… ну, она как-то сама работает. Негласное правило многих начинающих разработчиков и админ…
How to Connect a Namecheap Domain to a DigitalOcean Droplet with Nginx
Buying a domain is exciting. Creating a server is exciting too. But the moment you try to connect both of them, things can feel confusing. You bough…
How DNS Resolution Works: From `dig . NS` to Your Browser Loading Google
Every time you type google.com into a browser, something remarkable happens in milliseconds — a global, distributed lookup system translates that hu…