27 lines
792 B
Markdown
27 lines
792 B
Markdown
|
# ri-edge-dns
|
||
|
|
|
||
|
|
Public edge DNS notes (Drew Halvorsen).
|
||
|
|
|
||
|
|
This is scratch for the anycast edge, not the full runbook. The pulse *parser*
|
||
|
|
lives in a different tree — I am not duplicating it here after last quarter's
|
||
|
|
drift page.
|
||
|
|
|
||
|
|
## Pulse location
|
||
|
|
|
||
|
|
Edge DNS pulse is **TXT `_risk.ops`**.
|
||
|
|
|
||
|
|
If you need the record body / hostname template, ask on-call or read the
|
||
|
|
runbooks repo. This file only says **where** to look.
|
||
|
|
|
||
|
|
## Abuse / blocks
|
||
|
|
|
||
|
|
`203.0.113.50` is blocked after a brute-force against the contractor portal
|
||
|
|
and the git front-door. Do not lift that without Priya Nandakumar on the CAB.
|
||
|
|
|
||
|
|
## Windows resolvers
|
||
|
|
|
||
|
|
If you are changing records that CORP still caches, mail userX@corp.local
|
||
|
|
before the Friday window — he owns the Windows DNS side.
|
||
|
|
|
||
|
|
— Drew Halvorsen (`dhalvorsen@riskiens.com`)
|