Saturday, April 18, 2026
[Incident Report #032][DNS] SSL Expiry on NS1 and NS2
What Happened?
Our SSL certs for NS1 and NS2 expired earlier today. Currently our process
for handling the updating of SSL certs is not automated and requires our
team to manually install new certs and then reload the servers one after
the other. Usually this is on our internal calendar and is handled three to
four days before EOL. That didn’t happen this time.
We were seeing the following issues:
- Loss of DNS over HTTPS support
- Loss of DNS over TLS support
What did we do to fix this?
- We pulled new certs and updated the cert store
- We reloaded both name servers to restore service
Everything should be operational and peachy again!
Saturday, March 28, 2026
Ongoing Name Server Attacks
FurrIX is seeing attacks on our name servers that have not let
up for a few hours now and as a result we have had to tighten
our rate limits and start dropping excessive traffic.
The way things are going, we will not be letting up on our rate
limits any time soon.
If you are being affected by these changes, you can send an
email off to ‘nameservers at marbledfennec dot net’ and request
a whitelisting that will bypass the limits. We will require knowing
you use case, however.
Friday, March 27, 2026
Huh…Neat.
This is not a network/project related post, but occasionally
we’ll do a search to where all our domain pops up and who
knows about our existence-
Turns out another fur on FA found us and has our website
under their favorites, that’s kind of neat! Just something
I thought was cool, and who knows, maybe one day they’ll
see this post.
Wednesday, March 25, 2026
Agreement Reached with MFN
We’ve been working on our agreement with Marbled Fennec Networks
in the background and have reached what we deem to be an acceptable
way of moving forward and ensuring the survival of both projects, as
well as allowing us both to do our own thing on the same hardware.
This new version is what is being used to govern interactions and
responsibilities between both of our projects as of March 25th, 2026.
You can review the agreement at:
This page…
[Name Servers] Updated Configuration
We have been seeing a lot of DNS amplification attacks ongoing
during the past few weeks and have adjusted our name server
configuration to start rate-limiting and dropping request a fair
bit sooner.
We have also changed the graphs that we are showing for
the server status page.