--- title: Best DNS posts of 2025 | daily.dev description: The most upvoted DNS posts of 2025, curated by the daily.dev community. canonical: https://daily.dev/tags/dns/best-of/2025 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/dns/best-of/2025 og:type: website og:site_name: daily.dev og:title: Best DNS posts of 2025 | daily.dev og:description: The most upvoted DNS posts of 2025, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of DNS — 2025 1. 1 [](/posts/dotless-domains-xtgnvuze7 "Dotless Domains") Article Hacker News · 1y Dotless Domains Dotless domains are top-level domains that are accessible directly, without subdomains. These typically involve DNS records such as A/AAAA and MX, allowing direct access. Despite their technical feasibility, both ICANN and IAB oppose dotless domains, with restrictions applied primarily to gTLDs, while ccTLDs vary by country regulation. These domains face challenges in practical use, particularly concerning email protocols, which typically require more comprehensive domain structures. 273 19 2. 2 [](/posts/us-east-1-is-humanity-s-weakest-link--bglydvoi0 "US-EAST-1 is humanity’s weakest link…") Video Fireship · 50w US-EAST-1 is humanity’s weakest link… A major AWS outage in the US-EAST-1 region caused widespread service disruptions across thousands of companies including Netflix, Reddit, and PlayStation. The root cause was a DNS resolution failure affecting API endpoints, particularly DynamoDB, which cascaded into serverless job queues. The incident highlights the risks of centralized cloud infrastructure dependency and the challenges of single-provider reliance even with availability zones designed for redundancy. 122 18 3. 3 [](/posts/how-dns-works-a-guide-to-understanding-the-internet-s-address-book-tfkrkidum "How DNS Works: A Guide to Understanding the Internet's Address Book") Article freeCodeCamp · 1y How DNS Works: A Guide to Understanding the Internet's Address Book The Domain Name System (DNS) translates domain names into IP addresses, enabling easy access to websites. It involves DNS resolution, which efficiently processes queries through caching and servers like root, TLD, and authoritative name servers. Users can configure their DNS settings manually or rely on defaults and DHCP. The internet relies on a hierarchical DNS system, which has evolved for scalability and reliability. Domain registrars play a crucial role in managing domain registration and DNS setup. 115 4. 4 [](/posts/dns-records-ei01jthk2 "DNS Records") Article InfoSec Write-ups · 1y DNS Records DNS records serve different purposes in domain name resolution and security. A and AAAA records map domains to IPv4 and IPv6 addresses respectively. CNAME records create domain aliases, while MX records direct email routing. TXT records store security information like SPF, DKIM, and DMARC for email authentication. NS records identify authoritative name servers, SOA records contain zone management data, SRV records specify service locations and ports, and PTR records enable reverse DNS lookups for security validation. 114 5. 5 [](/posts/what-is-a-dns-server-and-how-does-it-work-tlh4ezix6 "What Is a DNS Server and How Does It Work") Article System Design Newsletter · 1y What Is a DNS Server and How Does It Work The post explains the Domain Name System (DNS), comparing it to a phone book that translates site names into IP addresses. It describes the process of how browsers, operating systems, and resolver servers interact to locate a site's IP address. The DNS hierarchy involves root servers, top-level domain (TLD) servers, and authoritative name servers, each playing a specific role. DNS uses caches to improve efficiency and reduce latency. 102 1 6. 6 [](/posts/localhost-dangers-cors-and-dns-rebinding-u72soz8yc "Localhost dangers: CORS and DNS rebinding") Article GitHub Blog · 2y Localhost dangers: CORS and DNS rebinding CORS misconfigurations can create serious security vulnerabilities by allowing unauthorized access to web resources. DNS rebinding is another attack that exploits server configurations to access local network resources. Understanding CORS mechanics and carefully implementing policies can prevent these issues. Common mistakes include improper domain validation and overly broad rules. Mitigations include using exact domain matches and validating host headers. 88 1 7. 7 [](/posts/from-typing-url-to-showing-the-webpage-sjrtq3szi "From Typing URL To Showing the Webpage") Article System Design Codex · 1y From Typing URL To Showing the Webpage Discover the complex process involved when you type a URL into a browser and press Enter. This action initiates a journey through networking protocols, DNS resolution, TCP connections, and browser rendering, culminating in a fully loaded webpage. Understand each stage, from determining if text is a URL to caching, DNS lookups, and finally rendering the page for viewing. 88 1 8. 8 [](/posts/a-german-isp-tampered-with-their-dns---specifically-to-sabotage-my-website-zfuafqntl "A German ISP tampered with their DNS - specifically to sabotage my website") Article Hacker News · 1y A German ISP tampered with their DNS - specifically to sabotage my website A German developer created a website to expose blocked domains by the CUII (Copyright Clearinghouse for the Internet), a private organization that decides what websites German ISPs should block. After publishing an article about CUII's mistakes, Telefonica (o2's parent company) modified their DNS blocking mechanism, making it harder to detect blocked domains. The timing suggests this was done specifically to sabotage the transparency tool, as Telefonica first tested their own domain on the website, then changed their blocking method two hours later. 86 7 9. 9 [](/posts/turning-my-esp32-into-a-dns-sinkhole-to-fight-doomscrolling-uganoquej "Turning My ESP32 into a DNS Sinkhole to Fight Doomscrolling") Article Hacker News · 2y Turning My ESP32 into a DNS Sinkhole to Fight Doomscrolling The post discusses transforming an ESP32 microcontroller into a DNS sinkhole to block social media sites and combat doomscrolling. The author details the process of configuring the ESP32 as a custom DNS server that reroutes traffic to non-routable IPs, effectively blocking access to specified domains. The project uses the Arduino IDE for programming and focuses on low-level networking and DNS protocols. 61 3 10. 10 [](/posts/today-is-when-amazon-brain-drain-finally-caught-up-with-aws-by7hzacvv "Today is when Amazon brain drain finally caught up with AWS") Article Hacker News · 50w Today is when Amazon brain drain finally caught up with AWS A major AWS outage in the US-EAST-1 region on October 20, 2025, caused by DNS resolution issues with DynamoDB endpoints, took 75 minutes to diagnose and affected much of the internet. The incident highlights concerns about AWS's loss of institutional knowledge due to significant employee departures, layoffs (27,000+ since 2022), and high regretted attrition rates (69-81%). Senior engineers who understood deep system failure modes have left, potentially leaving newer teams without the tribal knowledge needed to quickly detect and resolve complex infrastructure issues. The outage suggests that cost-cutting measures and talent drain may be compromising AWS's operational resilience. 44 6 11. 11 [](/posts/the-entire-internet-just-crashed-again-pkndihetg "The entire internet just crashed... again") Video Fireship · 46w The entire internet just crashed... again Cloudflare experienced a major global outage affecting millions of websites including ChatGPT, X (Twitter), and League of Legends. The root cause was a latent bug in their bot mitigation service triggered by a routine configuration change. An automatically generated configuration file for managing threat traffic grew beyond its expected size, causing crashes across multiple Cloudflare services. The incident highlights the internet's dependence on centralized infrastructure providers and the cascading impact when they fail. 42 6 12. 12 [](/posts/from-com-to-anything-introducing-top-level-domain-tld-insights-on-cloudflare-radar-fuqtztc8k "From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar") Article Cloudflare · 49w From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar Cloudflare Radar launched a new Top-Level Domain (TLD) insights page that provides comprehensive data on TLD popularity, traffic patterns, and security metrics. The page uses DNS Magnitude—a metric measuring how many unique networks query domains within a TLD—to rank over 2,500 TLDs. Surprisingly, .su (Soviet Union's legacy TLD) tops the ranking due to queries from a popular online game. Individual TLD pages offer detailed information including DNSSEC support, RDAP availability, DNS query volumes, certificate issuance data, and geographic distribution. The feature extends existing DNS insights to all delegated TLDs and integrates with Cloudflare Registrar for domain registration. All data is accessible via API and the Radar Data Explorer. 42 13. 13 [](/posts/improving-dns-performance-with-nodelocaldns-yudmt2smp "Improving DNS performance with NodeLocalDNS") Article Neon · 44w Improving DNS performance with NodeLocalDNS Neon deployed NodeLocalDNS across their Kubernetes clusters to optimize DNS performance for hundreds of thousands of ephemeral Postgres databases. By caching DNS requests locally on each node instead of routing them to central CoreDNS pods, they achieved an 84% reduction in 99th percentile latency and 87% improvement in 99.9th percentile latency. The deployment reduced network DNS traffic by 97% (from 2k to 60 requests/s), made traffic scale with nodes rather than pods, and unexpectedly helped identify DNS misconfigurations. The implementation required careful sequencing to avoid race conditions between kube-proxy and the DaemonSet, particularly on nodes with slow iptables rule installation. 37 14. 14 [](/posts/aws-dns-error-hits-dynamodb-causing-problems-for-multiple-services-and-customers-fpoqkyryj "AWS DNS error hits DynamoDB, causing problems for multiple services and customers") Article InfoWorld · 50w AWS DNS error hits DynamoDB, causing problems for multiple services and customers A DNS resolution error in AWS's US-EAST-1 region caused widespread DynamoDB API failures, affecting multiple AWS services and customers including Perplexity, Canva, Venmo, and others. The incident began shortly after midnight Pacific Time and was resolved within three hours through initial mitigations. The outage highlighted how single points of failure in cloud infrastructure can have global consequences, even when the root cause is isolated to one region. 37 2 15. 15 [](/posts/cloudflare-1-1-1-1-incident-on-july-14-2025-itpfwu4kb "Cloudflare 1.1.1.1 Incident on July 14, 2025") Article Cloudflare · 1y Cloudflare 1.1.1.1 Incident on July 14, 2025 Cloudflare's 1.1.1.1 DNS resolver experienced a 62-minute global outage on July 14, 2025, caused by an internal configuration error that inadvertently linked the resolver's IP prefixes to a non-production Data Localization Suite service. The issue originated from a dormant misconfiguration made on June 6, which was triggered when changes were made to the test service on July 14, causing BGP route withdrawals globally. The outage affected most DNS resolution methods except DNS-over-HTTPS traffic using the cloudflare-dns.com domain. Cloudflare is addressing the root cause by deprecating legacy systems and implementing staged deployment methodologies. 34 16. 16 [](/posts/kubernetes-dns-implementation-services-name-resolution-xmdm5w6eh "Kubernetes DNS: Implementation, Services, Name Resolution") Article Spacelift · 2y Kubernetes DNS: Implementation, Services, Name Resolution Kubernetes DNS simplifies networking by implementing name resolution and service discovery for Pods and Services. CoreDNS, the preferred DNS service, provides scalable and flexible DNS resolution, enhancing communication within clusters. Key benefits include automatic service discovery, simplified networking, and scalability. Troubleshooting tips, comparison between CoreDNS and kube-dns, and customization of DNS resolution are also covered. 30 17. 17 [](/posts/don-t-ever-use-local-tld-edheqzwae "Don't ever use .local TLD") Article Paweł Kraszewski · 51w Don't ever use .local TLD The .local top-level domain is reserved for mDNS/Avahi and should never be used in regular DNS configurations, even for isolated networks. RFC 6762 mandates that .local queries must be sent to multicast addresses, causing conflicts with traditional DNS services and breaking service discovery on Linux and macOS systems. Organizations using .local in Active Directory face significant compatibility issues. 22 13 18. 18 [](/posts/dns-brain-teaser-for-your-engineering-brain-tiv9gbpyu "DNS brain teaser for your engineering brain") Article RUBYLAND · 2y DNS brain teaser for your engineering brain The author shares insights from a prolonged technical issue involving DNS records and subdomains. The problem arose when trying to connect a subdomain to ClickFunnels and involved verifying certain TXT records that were not being recognized due to DNS record hierarchy. A key discovery was that CNAME records take the highest priority, potentially suppressing other records. By replacing a CNAME record with an ALIAS record for the root domain, the issue was resolved. Key lessons include understanding DNS hierarchy, using ALIAS records for root domains, and verifying public DNS status with tools rather than relying solely on the DNS registrar dashboard. 21 1 19. 19 [](/posts/my-mac-contacted-63-different-apple-owned-domains-in-one-hour---while-not-is-use-j1lgjjxru "My Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use") Article Hacker News · 1y My Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use A Mac user discovered their M2 MacBook Air contacted 63 different Apple domains in one hour while idle, representing 25% of all DNS queries despite using NextDNS to block telemetry. The domains included services for push notifications, CloudKit, iTunes/App Store, location services, crash reports, and various Apple infrastructure components. Notably, an older 2019 Intel MacBook Pro with identical DNS settings only had 3% of queries going to Apple domains, suggesting newer Macs may have increased background communication with Apple services. 20 4 20. 20 [](/posts/kubernetes-service-discovery-explained-with-practical-examples-khjaphfou "Kubernetes Service Discovery Explained with Practical Examples") Article Last9 · 1y Kubernetes Service Discovery Explained with Practical Examples Kubernetes service discovery enables applications to find and communicate with each other in dynamic container environments. Services provide stable network abstractions over ephemeral Pods using DNS resolution and label selectors. The guide covers practical examples including internal communication, external access via Ingress, headless services for direct Pod access, and troubleshooting common issues like DNS resolution failures and missing endpoints. 19 21. 21 [](/posts/ep193-database-types-you-should-know-in-2025-u8gki1svr "EP193: Database Types You Should Know in 2025") Article ByteByteGo · 42w EP193: Database Types You Should Know in 2025 A comprehensive overview of 13 database types for modern applications, including relational, columnar, key-value, in-memory, time-series, graph, document, vector, and others. Also covers the differences between Apache Kafka and RabbitMQ for message handling, explains HTTP protocol evolution and ecosystem components, details the DNS resolution process from browser to web server, and compares real-time update mechanisms including polling, WebSocket, and server-sent events. 11 22. 22 [](/posts/how-dns-works-deep-dived--5bxrn2vhz "How DNS WORKS? Deep Dived🤿🤿🤿") Article Backend Developer · 2y How DNS WORKS? Deep Dived🤿🤿🤿 DNS, or Domain Name System, is responsible for mapping IP addresses to domain names, allowing internet users to access websites using easy-to-remember addresses like google.com instead of numerical IPs. It is a critical component of how the internet functions. 11 23. 23 [](/posts/baddns-open-source-tool-checks-for-subdomain-takeovers-vf8ak26cg "BadDNS: Open-source tool checks for subdomain takeovers") Article Community Picks · 2y BadDNS: Open-source tool checks for subdomain takeovers BadDNS is an open-source Python tool for detecting domain and subdomain takeovers. It distinguishes itself by not only identifying takeover opportunities in CNAME, NS, and MX records but also by inspecting client-side references and CSP/CORS headers for vulnerabilities. Additionally, it automates the update of takeover signatures from reputable sources, ensuring users stay protected against the latest threats. BadDNS is available for free on GitHub, with future developments planned to include support for additional DNS record types and DNSSEC vulnerabilities. 10 [See all DNS archives](/tags/dns/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/dns/best-of/2025#page","url":"https://daily.dev/tags/dns/best-of/2025","name":"Best DNS Posts of 2025","description":"The most upvoted DNS posts of 2025, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/dns/best-of/2025#items","numberOfItems":23,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/dotless-domains-xtgnvuze7","name":"Dotless Domains"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/us-east-1-is-humanity-s-weakest-link--bglydvoi0","name":"US-EAST-1 is humanity’s weakest link…"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/how-dns-works-a-guide-to-understanding-the-internet-s-address-book-tfkrkidum","name":"How DNS Works: A Guide to Understanding the Internet's Address Book"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/dns-records-ei01jthk2","name":"DNS Records"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/what-is-a-dns-server-and-how-does-it-work-tlh4ezix6","name":"What Is a DNS Server and How Does It Work"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/localhost-dangers-cors-and-dns-rebinding-u72soz8yc","name":"Localhost dangers: CORS and DNS rebinding"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/from-typing-url-to-showing-the-webpage-sjrtq3szi","name":"From Typing URL To Showing the Webpage"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/a-german-isp-tampered-with-their-dns---specifically-to-sabotage-my-website-zfuafqntl","name":"A German ISP tampered with their DNS - specifically to sabotage my website"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/turning-my-esp32-into-a-dns-sinkhole-to-fight-doomscrolling-uganoquej","name":"Turning My ESP32 into a DNS Sinkhole to Fight Doomscrolling"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/today-is-when-amazon-brain-drain-finally-caught-up-with-aws-by7hzacvv","name":"Today is when Amazon brain drain finally caught up with AWS"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/the-entire-internet-just-crashed-again-pkndihetg","name":"The entire internet just crashed... again"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/from-com-to-anything-introducing-top-level-domain-tld-insights-on-cloudflare-radar-fuqtztc8k","name":"From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/improving-dns-performance-with-nodelocaldns-yudmt2smp","name":"Improving DNS performance with NodeLocalDNS"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/aws-dns-error-hits-dynamodb-causing-problems-for-multiple-services-and-customers-fpoqkyryj","name":"AWS DNS error hits DynamoDB, causing problems for multiple services and customers"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/cloudflare-1-1-1-1-incident-on-july-14-2025-itpfwu4kb","name":"Cloudflare 1.1.1.1 Incident on July 14, 2025"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/kubernetes-dns-implementation-services-name-resolution-xmdm5w6eh","name":"Kubernetes DNS: Implementation, Services, Name Resolution"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/don-t-ever-use-local-tld-edheqzwae","name":"Don't ever use .local TLD"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/dns-brain-teaser-for-your-engineering-brain-tiv9gbpyu","name":"DNS brain teaser for your engineering brain"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/my-mac-contacted-63-different-apple-owned-domains-in-one-hour---while-not-is-use-j1lgjjxru","name":"My Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/kubernetes-service-discovery-explained-with-practical-examples-khjaphfou","name":"Kubernetes Service Discovery Explained with Practical Examples"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/ep193-database-types-you-should-know-in-2025-u8gki1svr","name":"EP193: Database Types You Should Know in 2025"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/how-dns-works-deep-dived--5bxrn2vhz","name":"How DNS WORKS? Deep Dived🤿🤿🤿"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/baddns-open-source-tool-checks-for-subdomain-takeovers-vf8ak26cg","name":"BadDNS: Open-source tool checks for subdomain takeovers"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"DNS","item":"https://daily.dev/tags/dns"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/dns/best-of"},{"@type":"ListItem","position":5,"name":"2025"}]}]} ```