DNS cache efficiency for low-TTL records (was Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01)

2011-01-04 Thread David F. Skoll
On Tue, 4 Jan 2011 06:18:55 -0800 (PST) John Hardin jhar...@impsec.org wrote: [DFS says all queries should be to authoritative name servers to avoid cache blowouts.] You can't compare them. The nature of the queries is vastly different - the root nameservers only get queries like where are the

Re: DNS cache efficiency for low-TTL records (was Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01)

2011-01-04 Thread David F. Skoll
Following up on myself... I ran a little experiment. Just for fun, I took a day's worth of logs from a fairly busy server. There were just over 3.1 million SMTP connections/day. If they'd been using a DNSBL with a 15-minute TTL, they would have had about 1.13 million cache misses and 1.97

Re: DNS cache efficiency for low-TTL records (was Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01)

2011-01-04 Thread Matthias Leisi
On Tue, Jan 4, 2011 at 9:24 PM, David F. Skoll d...@roaringpenguin.com wrote: (Spamhaus could greatly lower the load on its servers by using much bigger TTLs, especially for lists that don't change often like the PBL. But as another posted mentioned, sometimes DNSBL owners want to see the

Re: DNS cache efficiency for low-TTL records (was Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01)

2011-01-04 Thread John Levine
In summary, I believe DNS caching is basically *useless* for any site small enough to use Spamhaus for free. And any very large site is probably large enough to deserve an rsync feed. Hmmn. See the ASRG list where I've posted some numbers I worked up from my own servers. R's, John