In article <cistron.171DAAD54475984F8F41345A0945DF9C39ED49@hqexchange.presidio.com>, James Smith <jsmith@PRESIDIO.com> wrote:
Get ready for more DOS-like behavior as systems get deployed that have 10 second TTLs in the DNS. These systems are used to provide multi-isp redundancy by pinging each upstreams router, and when a ping fails, start giving out a dns response using the other ISP IP range. Same FQDN, new IP.
So what we need is a tunable on the caching DNS server that says min_allowed_ttl = 300; if (ttl < min_allowed_ttl) ttl = min_allowed_ttl; If the above becomes a problem, this will happen. Mike.
On Mon, 21 Jan 2002, Miquel van Smoorenburg wrote: So what we need is a tunable on the caching DNS server that says min_allowed_ttl = 300; if (ttl < min_allowed_ttl) ttl = min_allowed_ttl; If the above becomes a problem, this will happen. Mike. Some larger providers allready do this on their caching servers. It's rather annoying, actually. I don't see anything wrong with setting a 10s TTL if I size my bandwidth and server capacity accordingly. matto --mghali@snark.net------------------------------------------<darwin>< Flowers on the razor wire/I know you're here/We are few/And far between/I was thinking about her skin/Love is a many splintered thing/Don't be afraid now/Just walk on in. #include <disclaim.h>
Date: Mon, 21 Jan 2002 21:18:10 -0800 (PST) From: just me <matt@snark.net>
Some larger providers already do this on their caching servers. It's rather annoying, actually. I don't see anything wrong with setting a 10s TTL if I size my bandwidth and server capacity accordingly.
That's not the problem. It's ill-behaved clients that ignore TTL and query every 10s no matter what. See some of James Smith's posts... If somebody wants to chew their own bandwidth and server resources and add latency, that's their business. At the other extreme, we have large providers that ignore TTLs and refuse to refresh more than once a week no matter what.
matto
--mghali@snark.net------------------------------------------<darwin><
Eddy --------------------------------------------------------------------------- Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence --------------------------------------------------------------------------- Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist@brics.com> To: blacklist@brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist@brics.com>, or you are likely to be blocked.
participants (3)
-
E.B. Dreger -
just me -
Miquel van Smoorenburg