On Thu, 30 Dec 2010, David F. Skoll wrote:

On 30 Dec 2010 17:13:07 -0000
John Levine <jo...@taugh.com> wrote:

We'll have to change our software to handle v6 lookups no matter what,
so I don't see it as a big deal whether it's a small change or a
slightly larger change.

I agree, so I propose a much larger change: Stop using DNS for this
purpose.  I don't think it's the right tool for the job.

Any protocol that makes lookups in a huge adress space efficient and
efficiently-cacheable is going to leak much of the list information.
So why not just distribute copies of the entire list in a format that
permits efficient lookups and efficient sychronization (eg with
rsync)?

Timeliness? How often are you going to refresh the local copy of the entire WL/BL? Or are you assuming the WL/BL will be relatively unchanging over time?

Overall bandwidth? How big is the overall WL/BL? Can hosting of the file be as efficiently distributed across multiple caching hosts (e.g. via Coral) as can DNS? What's the download volume vs. the DNS query volume? Or are you assuming the refresh protocol supports incremental updates? Does rsync support any incremental update mechanism other than appending? That would work for added entries, how do you delete?

Local spam volume vs. the size of the full BL? If I only get a hundred spams a day is it reasonable for me to store the full BL locally? Perhaps several BLs?

Are you, essentially, proposing the replacement of DNS with /etc/hosts?

Granted, rsync or something similar may be a better solution than DNS in some cases, but I think it's unwise to completely discard it.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Gun Control laws cannot reduce violent crime, because gun control
  laws focus obsessively on a tool a criminal might use to commit a
  crime rather than the criminal himself and his act of violence.
-----------------------------------------------------------------------
 22 days since the first successful private orbital launch (SpaceX)

Reply via email to