[Jenkins-infra] Proposal - Switch to cloudflare for dns

[Olblak]

Hi Gavin, 

> As far as I can tell, https://github.com/jenkins-infra/bind is the repo used for all the current DNS? I suspect thats not true cause jenkins.io isn't listed
DNS configuration is managed from the azure account (jenkins-ci.org <https://github.com/jenkins-infra/azure/blob/master/plans/dns_jenkinsci.tf> and jenkins.io <https://github.com/jenkins-infra/azure/blob/master/plans/dns_jenkinsio.tf>)

> With last weeks various outages around updates/mirrors, I got to thinking about using cdn for some of this data.
Not all the issues we had would be solved by using a CDN, the machine hosting mirrors.jenkins.io, updates.jenkins.io, pkg.jenkins.io and archives.jenkins.io needs to be refactored anyway.

> I also found out they do open source sponsorships, so while the free tier probably works fine, but https://blog.cloudflare.com/cloudflare-open-source-your-upgrade-is-on-the-house/ says they'll upgrade the account for open source projects, which gives better access control and such. 

It's definitely worth looking into, thanks for sharing the information


---
gpg --keyserver keys.gnupg.net --recv-key 52210D3D
---


On Thu, Dec 26, 2019, at 9:08 PM, Gavin Mogan wrote:
> Hey everyone,
> 
> With last weeks various outages around updates/mirrors, I got to thinking about using cdn for some of this data.
> 
> As far as I can tell, https://github.com/jenkins-infra/bind is the repo used for all the current DNS? I suspect thats not true cause jenkins.io isn't listed
> 
> Assuming the repo is the source of truth, there's really nothing complicated going on with DNS, no split views or anything like that.
> 
> The cloudflare cdn would allow for updates to still be run independently, but take the brunt of the load
> 
> I also found out they do open source sponsorships, so while the free tier probably works fine, but https://blog.cloudflare.com/cloudflare-open-source-your-upgrade-is-on-the-house/ says they'll upgrade the account for open source projects, which gives better access control and such.
> 
> I don't know if its feasible but thought it was worth looking into.
> 
> Gavin
> _______________________________________________
> Jenkins-infra mailing list
> Jenkins-infra at lists.jenkins-ci.org
> http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.jenkins-ci.org/pipermail/jenkins-infra/attachments/20191227/57fd6fce/attachment.html>