> On 28 Feb 2024, at 18:45, Frank Louwers <frank+p...@tembo.be> wrote:
> 
> My experience: Google tries damn hard (tm) to resolve any domain, regardless 
> of the incorrect settings set by / behaviour of the auth.
> 
> Reality is that quad8 can resolve way more than you typically can, once you 
> start measuring.

Right. I get your point and this has been reported a lot of times during RIPE 
or OARC meetings. 
Does that also apply to CF and Q9?

The Op mentioned “Google, CF, Q9 and others”, hence my question. 

>> On 28 Feb 2024, at 18:09, Nico Cartron via dnsdist 
>> <dnsdist@mailman.powerdns.com> wrote:
>> 
>> 
>>>> On 28 Feb 2024, at 14:26, Affan Basalamah via dnsdist 
>>>> <dnsdist@mailman.powerdns.com> wrote:
>>> 
>>> 
>>> Hi,
>>> 
>>> I'm responsible for managing DNS server for service providers, and they 
>>> request that DNS server usually have some important domain from my country 
>>> ccTLD that usually can't be resolved because of the their authoritative DNS 
>>> was not reliable, and every user usually contacted the service provider, 
>>> and they ask us to forward these domains to public DNS resolver (google, 
>>> CF, etc)
>>> 
>>> Usually it become repetitive & menial effort from our side, and I wonder 
>>> how it's possible these logic can be achieved using DNSDist:
>>> 
>>> - DNSDist is installed in front of provider DNS server, and create default 
>>> pool for provider DNS server
>>> - Create another pool for public DNS server (google, CF, Q9, etc)
>>> - Can I create list of domain that usually problematic to be redirected to 
>>> the public DNS pool?
>>> - Can I create rules for these domains to be forwarded to the public DNS 
>>> pool?
>>> - Can I create health check for these rules to be activated (every 1 or 5 
>>> minutes, to check whether the authoritative DNS server for these domain is 
>>> still alive), and if the authoritative server is down, the rules is 
>>> activated, these domains is forwarded to public DNS pool
>>> - After health check find out the authoritative DNS server is alive, the 
>>> rule is disabled, the domain is resolved via the provider DNS
>>> 
>>> 
>>> Sorry because I don't completely understand the capability of DNSdist, but 
>>> I hope you can shed some light to me about this, and I hope DNSdist can 
>>> solve this kind of problem.
>> 
>> Hi,
>> 
>> I don’t get how forwarding the request to a public DNS such as Cloudflare or 
>> Google would fix your issue, since you said that was the Authoritative 
>> servers responsible for those domains that had issues?
>> _______________________________________________
>> dnsdist mailing list
>> dnsdist@mailman.powerdns.com
>> https://mailman.powerdns.com/mailman/listinfo/dnsdist
_______________________________________________
dnsdist mailing list
dnsdist@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/dnsdist

Reply via email to