<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>crtasm</author><text>I read on the Pi-Hole forums that &amp;#x27;fallback&amp;#x27; is a misleading term because clients don&amp;#x27;t work that way - they will happily spread requests between two functioning DNS servers.  Can anyone confirm this or provide further insight?</text><parent_chain><item><author>gcommer</author><text>This is a great write up. It&amp;#x27;s also why the DNS root servers have a policy of surviving DDoS through massively over-provisioned, multi-org, anycasted redundancy rather this sort of smart DDoS mitigation that drops traffic: DNS is so critical that any risk of dropping real traffic is unacceptable. (obviously, such a scale is impractical for 99% of services)&lt;p&gt;A good takeaway from this outage for the average user would be to make sure that your fallback DNS resolvers are operated by totally separate providers. (eg, configure 1.1.1.1 with 8.8.8.8 as a fallback, rather than 1.1.1.1 and 1.0.0.1) (Edit: fixed cloudflare&amp;#x27;s secondary address)</text></item></parent_chain></comment><story><title>1.1.1.1 outage explanation</title><url>https://blog.cloudflare.com/today-we-mitigated-1-1-1-1/</url></story>
<instructions>Your goal is to analyze the following comment and estimate how highly it will be upvoted by the Hacker News community.</instructions><comment><author>berti</author><text>Or 9.9.9.9 if you&amp;#x27;re not as comfortable with Google services.</text><parent_chain><item><author>gcommer</author><text>This is a great write up. It&amp;#x27;s also why the DNS root servers have a policy of surviving DDoS through massively over-provisioned, multi-org, anycasted redundancy rather this sort of smart DDoS mitigation that drops traffic: DNS is so critical that any risk of dropping real traffic is unacceptable. (obviously, such a scale is impractical for 99% of services)&lt;p&gt;A good takeaway from this outage for the average user would be to make sure that your fallback DNS resolvers are operated by totally separate providers. (eg, configure 1.1.1.1 with 8.8.8.8 as a fallback, rather than 1.1.1.1 and 1.0.0.1) (Edit: fixed cloudflare&amp;#x27;s secondary address)</text></item></parent_chain></comment><story><title>1.1.1.1 outage explanation</title><url>https://blog.cloudflare.com/today-we-mitigated-1-1-1-1/</url></story>