discuss: small & silent... services?
Subject:
Re: small & silent... services?
From:
Thomas Zimmerman ####@####.####
Date:
20 Jun 2004 17:16:12 -0000
Message-Id: <200406201020.54678.thomas@zimres.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wednesday 09 June 2004 10:44, Rodolfo J. Paiz wrote:
> At 11:30 6/9/2004, Christian Schnobrich wrote:
> >I guess that's hardly possible. Setting up Bind (or whatever) with
> >forwarding requires knowledge of the user's network topology that
> >presumably is very difficult to gather automagically. Apparently the
> >maintainers' desire to have it work without need for user
> > intervention is stronger than being nice to the root servers.
> However, the default named.conf file in the caching-nameserver RPM
> (or the default suggested named.conf in any tarball) could easily
> contain:
>
> ----snip----
> // Please replace each 000.000.000.000 with the IP address of
> // the DNS servers provided by your Internet Service Provider.
> // Then remove the "// " from the beginning of each line below.
> //
> // acl dns-servers { 000.000.000.000; 000.000.000.000; };
> //
> // forward first;
> // forwarders { dns-servers; };
> ----snip----
>
> Or better yet:
>
> ----snip----
> // Please replace each 000.000.000.000 with the IP address of
> // the DNS servers provided by your Internet Service Provider.
> // BIND will not start properly until you make this change.
>
> acl dns-servers { 000.000.000.000; 000.000.000.000; };
>
> forward first;
> forwarders { dns-servers; };
> ----snip----
>
> I don't see why that is so hard!
It's not hard, however, there is one tiny problem. There are ISPs that
run bad DNS servers, so using the root servers is you only choice. Case
in point: Comcast DNS is _slow_ for some queries (on the order of 3-10
seconds per name, sometimes.) I've also seen some DNS problems where
they simply didn't resolve all names (the new tdls, .info, .name,
and .biz) --and I don't feel sorry for the root servers, they are
designed to take a beating and continue serving names.
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFA1cdyOStTnUTb5R8RAkOQAJ9sSAUDr32wqUCKjOOKskeLZqjOmACfeu3L
5ECQJaU8qM/iXXYzrpmRMzw=
=tcbJ
-----END PGP SIGNATURE-----
