[DNSOP] Measuring DNS TTL Violations in the wild

2017-12-01 Thread Giovane C. M. Moura
Hi, In the light of the recent discussions on TTL violations and server stale here on the list, I decided to take a look on how often resolvers perform TTL violations in the wild. To do that, I used almost 10K Ripe Atlas probes. You can find a report and datasets at: https://labs.ripe.net/Member

Re: [DNSOP] Measuring DNS TTL Violations in the wild

2017-12-01 Thread Ólafur Guðmundsson
I strongly disagree with your "terminology", TTL is a hint about maximum caching period, not a demand or a contract. A resolver can at any time for any reason discard cached entries. Many Authoritative operators have "unreasonable" TTL's like less than 10 seconds or multiple days and I see no reaso

Re: [DNSOP] Measuring DNS TTL clamping in the wild

2017-12-01 Thread Jared Mauch
> On Dec 1, 2017, at 11:38 AM, Ólafur Guðmundsson wrote: > > > I strongly disagree with your "terminology", TTL is a hint about maximum > caching period, not a demand or a contract. > A resolver can at any time for any reason discard cached entries. Agreed. > Many Authoritative operators

Re: [DNSOP] Measuring DNS TTL Violations in the wild

2017-12-01 Thread Wessels, Duane
> On Dec 1, 2017, at 8:38 AM, Ólafur Guðmundsson wrote: > > I strongly disagree with your "terminology", TTL is a hint about maximum > caching period, not a demand or a contract. You say its just a hint. If you put a TTL of 1 hour on your data, and I have a recursive name server that reuses

Re: [DNSOP] Measuring DNS TTL Violations in the wild

2017-12-01 Thread Ólafur Guðmundsson
On Fri, Dec 1, 2017 at 5:02 PM, Wessels, Duane wrote: > > > On Dec 1, 2017, at 8:38 AM, Ólafur Guðmundsson > wrote: > > > > I strongly disagree with your "terminology", TTL is a hint about maximum > caching period, not a demand or a contract. > > You say its just a hint. If you put a TTL of 1 h

Re: [DNSOP] Measuring DNS TTL Violations in the wild

2017-12-01 Thread Paul Hoffman
On 1 Dec 2017, at 9:16, Ólafur Guðmundsson wrote: > We are getting into religion here, the original poster called people that > cap TTL's Heretics, Looking through the mail archives, no one other than you is using that term. --Paul Hoffman ___ DNSOP m

Re: [DNSOP] Measuring DNS TTL clamping in the wild

2017-12-01 Thread Jared Mauch
> On Dec 1, 2017, at 12:23 PM, Paul Hoffman wrote: > > On 1 Dec 2017, at 9:16, Ólafur Guðmundsson wrote: > >> We are getting into religion here, the original poster called people that >> cap TTL's Heretics, > > Looking through the mail archives, no one other than you is using that term. I th

Re: [DNSOP] Measuring DNS TTL clamping in the wild

2017-12-01 Thread Steve Crocker
I would be very interested in a bit more precision here. Is there a way to say what is permissible vs impermissible re TTLs, and is there a way to say what is desirable vs undesirable re TTLs? We all understand that longer TTLs reduce the frequency of refresh at the expense of slower response