Member
---
- @head34: conflating two incidents
- 2021: Strasbourg datacenter fire (SBG)
- DNS anycast: separate anycast topology
- correction: OVHcloud DNS anycast
- existed before 2021
- continued during incident
- however: @larryjeong still has single provider
- provider-level failure mode remains
- recommend: secondary DNS at different registrar
What hardware tier at OVHcloud?
Member OP
VPS Comfort 2018v1, 2 vCore / 4GB / 80GB SSD. €8.39/month. Old plan, grandfathered. They still list it if you dig.
Member
Cheaper than cPanel license alone these days. I pay €15/year for .fr domain with included DNS at OVHcloud, run my own BIND on €4 OVHcloud VPS secondary. Overkill for blog but I sleep well.
This. cPanel solo license is what, $15/month now? Plus the actual server. Madness.
fail2ban still needed on that VPS. OVHcloud does not filter your SSH for you. I see constant scans on my OVH box in Beauharnois.
Member OP
Already on key-only auth, nonstandard port, fail2ban with 3 strikes. Cloudflare in front for web. Paranoid enough?
Nonstandard port is security through obscurity. Key-only with proper firewall rules on standard port is cleaner. BGP would let you announce your own /24 for true independence but that's €€€.
Following this thread. Also migrating off cPanel, dreading DNS part.
I moved 40 zones last month. Used dnscontrol to push to both Cloudflare and OVHcloud. Took an afternoon. Do it once, sleep forever.
