Willkommen bei ssplip. io

etwa 5000~500000

239

Gemischte Höhen und Tiefen. Auf Glück folgt Unglück Glück führt zu Unglück

3

78.46.204.247

Welcometosslip.ioTogglenigationsslip.ioHomesslip.ioOperationalStatus:[Status]sslip.ioisaDNS(DomainNameSystem)servicethat,whenqueriedwithahostnamewithanembeddedIPaddress,returnsthatIPaddress.Itwasinspiredbyxip.io,whichwascreatedbySamStephenson.Herearesomeexamples:Hostname/URLIPAddressNotes52.0.56.137.sslip.io52.0.56.137dotseparators,sslip.iowebsitemirror(IPv4)52-0-56-137.sslip.io52.0.56.137dashseparators,sslip.iowebsitemirror(IPv4)192.168.0.1subdomain192.168.0.1subdomain+dashes78.46.204.247dashprefix,sslip.iowebsitemirror(IPv4)--1.sslip.io::1IPv6—alwaysusedashes,neverdots2a01-4f8-c17-b8f--2.sslip.io2a01:4f8:c17:b8f::2sslip.iowebsitemirror(IPv6)Developers:disableindexingofyourstingsitetooidbeingblocked(weblockbydisablingresolutionofyoursslip.iohostname);disableindexingbyeitherincludingtheX-Robots-T:noindexinyourHTTPheaderWillkommen bei ssplip. iosorincludearobots.txtattherootofyourwebsitewiththefollowingcontents:User-ent:*Disallow:/Branding/WhiteLabel/CustomDomainssslip.iocanbeusedtobrandyourownsite(youdon’tneedtousethesslip.iodomain).Forexample,sayyouownthedomain“example.com”,andyouwantyoursubdomain,“xip.example.com”tohexip.io-stylefeatures.Toaccomplishthis,setthefollowingthreeDNSserversasNSrecordsforthesubdomain“xip.example.com”Donotusethesenameserversforgeneral-purposenameresolution;instead,continuetouse1.1.1.1,8.8.8.8,9.9.9.9orwhatevernameserveryou'recurrentlyusing.Thesslip.ionameserversarenotpublicrecursivenameservers.Theywillnotresolveregulardomainnames(e.g."google.com").hostnameIPaddressLocationns-aws.sslip.io.52.0.56.1372600:1f18:aaf:6900::aUSAns-gce.sslip.io.104.155.144.4USAns-azure.sslip.io.52.187.42.158SingaporeLet’stestitfromthecommandlineusingdig:dig@ns-gce.sslip.io.169-254-169-254.xip.example.com+shortYields,hopefully:[connectiontimedout]169.254.169.254ButIWantMyOwnDNSServer!IfyouwanttorunyourownDNSserver,it'ssimple:youcancompilefromsourceoryoucanuseoneofourpre-builtbinaries.Inthefollowingexample,weinstall&runourserverwithinadockercontainer:dockerrun-it--rmfedoracurl-Lgithub.com/cunnie/sslip.io/releases/download/3.1.0/sslip.io-dns-server-linux-amd64-odns-serverchmod+xdns-server./dns-server2>dns-server.log&dnfinstall-ybind-utilsdig@localhost127-0-0-1.sslip.io+short#returns"127.0.0.1"TLSYoucanacquireTLScertificatesforyourexternally-accessiblehostsfromcertificateauthorities(CAs)suchasLet'sEncrypt.TheeasiestmechanismtoacquWillkommen bei ssplip. ioireacertificatewouldbetousethechallenge.Itrequires,ataminimum,awebserverrunningonyourmachine.TheCaddywebserverisoneofthemostpopularexamples.Forexample,ifyouhadawebserverwiththeIPaddress52.0.56.137,youcouldobtainaTLScertificatefor"52.0.56.137.sslip.io",or"",or"prod.".2021-02-12Let'sEncryptRateLimitsIfyourrequestforan"sslip.io"certificateisrate-limited,pleaseopenaGitHubissueandwe'llrequestarate-limitincrease.Ifyouheprocuredawildcardcertificateforyourbranded/whitelabel/customsslip.io-stylesubdomain,youmayinstallitonyourmachinesforTLS-verifiedconnections.WhenusingaTLSwildcardcertificateinconjunctionwithyourbrandedsslip.iostylesubdomain,youmustusedashesnotdotsasseparators.Forexample,ifyouhetheTLScertificatefor*.xip.example.com,youcouldbrowseto/butnot/.ifyou'reinterestedinacquiringawildcardcertificateforyoursslip.iodomain,e.g."*.52-0-56-137.sslip.io",theprocedureisdescribedhere.ExperimentalFeaturesExperimentalfeaturescanchange;don'tdependonthem.DeterminingYourExternalIPAddressviaDNSLookupYoucanusesslip.io'sDNSservers(ns.sslip.io)todetermineyourpublicIPaddressbyqueryingtheTXTrecordofip.sslip.io:dig@ns.sslip.iotxtip.sslip.io+short#samplereply"2607:fb90:464:ae1e:ed60:29c:884c:4b52"dig@ns.sslip.iotxtip.sslip.io+short-4#forcesIPv4lookup;samplereply"172.58.35.231"dig@ns.sslip.iotxtip.sslip.io+short-6#forcesIPv6lookup;samplereply"2607:fb90:464:ae1e:ed60:29c:884c:4b52"WhenqueryingforyourIPaddress,alwaysincludethesslip.ionameserver(e.g.@ns.sslip.io).Ifomitted,youwon'tgetyourIPaddress;instead,you'llgettheIPaddressofyourupstreamnameserver.ThisfeaturewasinspiredbyGoogle'sDNSlookup,i.e.digtxto-o.myaddr.l.google.com@8.8.8.8+short.TherearealsopopularservicesfordeterminingyourpublicIPaddress:icanhazip.com(backstory)ipify.orgip4.mecurlmyip.orgifconfig.coipinfo.io(commercial)AbigadvanteofusingDNSqueriesinsteadofHTTPqueriesisbandwidth:queryingns-aws.sslip.iorequiresamere592bytesspreadover2packets;Queryingicanhazip.com/requires8692bytesspreadoutover34packets—over14timesasmuch!Admittedlybandwidthuseisabiggerconcernfortheonehostingtheservicethantheoneusingtheservice.DeterminingTheServerVersionofSoftwareYoucandeterminetheserverversionofthesslip.iosoftwarebyqueryingtheTXTrecordofversion.status.sslip.io:dig@ns-gce.nono.ioversion.status.sslip.iotxt+short"2.7.0""2023/10/04-18:51:49-0700""8f7f2df"Thefirstnumber,("2.6.1"),istheversionofthesslip.ioDNSsoftware,andismostrelevant.Theothertwonumbersarethedatecompiledandthemostrecentgithash,butthosevaluescandifferacrossserversduetothemannerinwhichthesoftwareisdeployed.ServerMetricsYoucanretrievemetricsfromagivenserverbyqueryingtheTXTrecordsofmetrics.status.sslip.iodig@ns-aws.sslip.iometrics.status.sslip.iotxt+short"Uptime:""Blocklist:2023-10-0407:37:50-073,6""Queries:(86.3/s)""TCP/UDP:5231/""AnsweredQueries:(29.4/s)""A:""AAAA:""TXTSource:57""TXTVersion:24""PTRIPv4/IPv6:Willkommen bei ssplip. io318/22""NSDNS-01:135""Blocked:175"ExplanationofMetricsUptimeThetimesincetheDNSserverhasbeenstarted,insecondsBlocklistThefirstvalue("2023-10-0407:37:50-07")isthedatetheblocklistwaslastdownloaded.Thefollowingtwonumbersarethenumberofstringmatchesthatareblocked(e.g."raiffeisen"isastringthatisblockedifitappearsinthequeriedhostname)andthenumberofCIDRmatchesthatareblocked(e.g."43.134.66.67/24"isblocked).TheblocklistcanbefoundhereQueriesThisconsistsoftwonumbers:ThefirstistherawnumberofDNSqueriesthattheserverhasrespondedtosincestartingoperation,andthesecondisthefirstnumberdividedbytheuptime(i.e.queries/second)TCP/UDPThisisthenumberofqueriesreceivedontheTCPprotocolversustheUDPprotocol.Thesumshouldequalthenumberofqueries.DNStypicallyusestheUDPprotocolAnsweredQueriesThisconsistsoftwonumbers:thefirstisthenumberofquerieswerespondedtowithatleastonerecordintheanswersection,andthesecondisthefirstnumberdividedbytheuptime(i.e.queries/second).Notethatthenumberofansweredqueriesistypicallyathirdorfourththesizeoftheoverallqueries.Thisisnormal.OnereasonforthisdisparityisthatoftenboththeIPv4(A)andIPv6(AAAA)recordswillbechecked,butonlyonereplywillhearecordintheanswersection.Forexample,browsingto"127.0.0.1.sslip.io"generatestwolookups,onewithananswer(IPv4),andonewithout(IPv6).Anotherreasonisthatlookupsfollowachain,e.g.lookingup"127.0.0.1.sslip.io"maygenerateuptofourqueriesforArecords("1.sslip.io","0.1.sslip.io","0.0.1.sslip.io"and"127.0.0.1.sslip.io"),onlythelastofwhichreturnsarecordintheanswersection.Pro-tip:ifyouwanttoshemillisecondsoffnameresolution,usedashesnotdotsinyourhostname(e.g."10-9-9-30.sslip.io"insteadof"10.9.9.30.sslip.io")AThenumberofresponseswhichincludedanA(IPv4)recordsincestartingoperation(e.g."dig127.0.0.1.sslip.io")AAAAThenumberofresponseswhichincludedanAAAA(IPv6)recordsincestartingoperation(e.g."dig--1.sslip.ioaaaa")TXTSourceThenumberofresponseswhichincludedaTXTrecordofthequerier'sIPaddresssincestartingoperation(e.g."dig@ns.sslip.ioip.sslip.iotxt")TXTVersionThenumberofresponseswhichincludedaTXTrecordoftheDNS'sserversversionsincestartingoperation(e.g."dig@ns-azure.sslip.ioversion.status.sslip.iotxt")PTRIPv4/IPv6Thisconsistsoftwonumbers;thefirstisthenumberofresponsestoIPv4PTRqueries(1.0.0.127.in-addr.arpa.→127-0-0-1.sslip.io.),thesecond,IPv6PTRqueriesNSDNS-01ThenumberofresponseswhichincludedadelegationoftheNS(nameserver)tosatisfyacertificateauthority'sDNS-01challenge.ThislookupisusedforgeneratingwildcardcertificatesfromLet'sEncryptandothercertificateauthority.Technicallythisisnota"successful"queryinthatwedon'treturnarecordintheANSWERsection,butwedoreturnanNSrecordintheAUTHORITYsection.(e.g."dig@ns-gce.sslip.io_acme-challenge.192.168.0.1.sslip.io.soa")RelatedServicesxip.io:theinspirationforsslip.io.Sadly,thisappearstobenolongermaintainedafterSamStephensonleftBasecamp.nip.io:similartoxip.io,butthePowerDNSbackendiswritteninelegantPythonlocaltls:ADNSserver+webservertoprovideTLStoonlocaladdresses.Footnotes[Status]Astatusof“buildfailing”rarelymeansthesystemisfailing.It’smoreoftenanindicationthatwhentheserverswerelastchecked(currentlyeverysixhours),theCI(continuousintegration)serverhaddifficultyreachingoneofthethreesslip.ionameservers.That’snormal.[connectiontimedout][connectiontimedout]DNSrunsoverUDPwhichhasnoguaranteeddelivery,andit’snotuncommonforthepacketstogetlostintransmission.DNSclientsareprogrammedtoseamlesslyqueryadifferentserverwhenthathappens.That’swhyDNS,byfiat,requiresatleasttwonameservers(forredundancy).FromIETF(InternetEngineeringTaskForce)RFC(RequestforComment)1034:Agivenzonewillbeailablefromseveralnameserverstoinsureitsailabilityinspiteofhostorcommunicationlinkfailure.Byadministrativefiat,werequireeveryzonetobeailableonatleasttwoservers,andmanyzoneshemoreredundancythanthat.window.dataLayer=window.dataLayer||[];functiongt(){dataLayer.push(arguments);}gt('js',newDate());gt('config','G-M32C798MGY');