On Tue, 15 Jul 2014, Martin Hepworth wrote:

On Tuesday, 15 July 2014, Quanah Gibson-Mount <qua...@zimbra.com> wrote:

--On Wednesday, July 16, 2014 12:08 AM +0200 Axb <axb.li...@gmail.com>
wrote:

 and what's prevents you from running a recursor on those servers?

In a halfway well connected network, and Rackpace is VERY well connected,
DNS requests should takes less that 1 sec.

The problem isn't the DNS requests.  The problem is the appliance that is
INTERCEPTING THE REQUESTS ON THE WAY OUT.

Run your own caching server on the sa box itself, makes a surprising
difference and something I always reconmend

...which does not help if your upstream gateway is *intercepting and reprocessing* your DNS queries.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Democrats '61: Ask not what your country can do for you,
   ask what you can do for your country.
  Democrats '07: Ask not what your country can do for you,
   demand it!
-----------------------------------------------------------------------
 Tomorrow: the 69th anniversary of the dawn of the Atomic Age

Reply via email to