TLS connection reuse is being used. About 10% of the connections are reused for large volume ISPs. Small volume ISPs do not see connection reuse. I believe this is as expected.
I did some testing of our DNS setup. A DNS query using dig is less than 20 msec for both our primary and secondary dns servers in /etc/resolv.conf -- see below. Thanks, Greg [rsm@mail01 ~]$ cat /etc/resolv.conf # Generated by NetworkManager search raystedman.org nameserver 192.168.122.1 nameserver 8.8.4.4 [rsm@mail01 ~]$ dig @192.168.122.1 google.com ; <<>> DiG 9.11.36-RedHat-9.11.36-11.el8_9.1 <<>> @192.168.122.1 google.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45410 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 172 IN A 142.250.191.78 ;; Query time: 1 msec <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< ;; SERVER: 192.168.122.1#53(192.168.122.1) ;; WHEN: Tue May 21 15:56:06 PDT 2024 ;; MSG SIZE rcvd: 55 [rsm@mail01 ~]$ dig @8.8.4.4 google.com ; <<>> DiG 9.11.36-RedHat-9.11.36-11.el8_9.1 <<>> @8.8.4.4 google.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35863 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 300 IN A 142.250.191.46 ;; Query time: 16 msec <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< ;; SERVER: 8.8.4.4#53(8.8.4.4) ;; WHEN: Tue May 21 15:57:47 PDT 2024 ;; MSG SIZE rcvd: 55 _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org