DNS Server Locations

[NodeBytes]

Where would you all like to see some DNS servers being hosted? Any really awesome networks out there for a DNS server?

 

[drmike]

Anywhere.  Ideally encrypted DNS lookup services and fast on the replies/lookups.

 

[Deleted]

BIND with forwarders give you good resolution speed. Most networks cache DNS for about 20 minutes to an hour and let it expire. 

 

[drmike]

Yep, the DNS caching though = bad unless the original record says to cache it.  Quite common and it drives me nuts.  Surely they are violating spec.

The crypto-based DNS I keep drumming since there are few to no alternatives for the lookups and such concentration creates an identifiable high risk asset group to special monitor. 

 

[Deleted]

It's not bad, as a full lookup puts it's toll on the root servers. It's common because in RFC1034, section 4.3.4 states that a server /can/ do it, not that it must or must not. 

Uncached:

monk@deathstar:~$ time nslookup www.ais.net 

Server: 127.0.1.1

Address: 127.0.1.1#53

 

Non-authoritative answer:

www.ais.net canonical name = ais.net.

Name: ais.net

Address: 207.251.194.49

 

 

real 0m0.562s

user 0m0.004s

sys 0m0.020s

 

----

 

Cached:

 


monk@deathstar:~$ time nslookup www.google.com

Server: 127.0.1.1

Address: 127.0.1.1#53

 

Non-authoritative answer:

Name: www.google.com

Address: 173.194.43.20

 

real 0m0.040s

user 0m0.000s

sys 0m0.008s

 


Look at the real time for both. 

 

[drmike]

14x slower with the uncached.

I run the same general idea internally with a minimum cache time  on records.  

Irks me though when upstreams do this for public records and/or DNS hosting with your domain records -- that is caching things inconsistently compared to your config.