[dns-operations] How does resolver query works

InterNetX - Marco Schrieck marco.schrieck at internetx.de
Mon Mar 15 13:49:06 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

thank you for your answer, but what happend in the case of an "timeout"
or "connection refused" on a single IP.



Am 13.03.10 00:40, schrieb Mark Andrews:
> 
> In message <20100312123933.GB42913 at macbook.catpipe.net>, Phil Regnauld writes:
>> Paul Vixie (vixie) writes:
>>>
>>> what bind4/bind8 did and what i still think is the right thing, is to build
>>> the list of nameserver addresses (unrolling all the nameserver names), and
>>> try them in measured-RTT order, assuming 0 RTT for untried addresses, and
>>> depref'ing each address a little when rolling in new RTT samples.
>>>
>>> on SERVFAIL or REFUSED, the address is poisoned (given an absurdly long
>>> artificial RTT) along with all other addresses that came from the same
>>> nameserver name.

As I understand that If one "nameservername" send send servfail then
bind try also the other one?

>>
>> 	So what does BIND9 do ?
>  
> It translates the names to addresses then sorts the list of addresses
> based on rtt.  Addresses without a rtt estimate get a small random
> value.  It does this using the current cache contents.  It will
> also lookup addresses for nameservers it doesn't have in parallel
> to completing the current query.  If it has no addresses it will
> stall waiting for the nameserver's addresses to resolve.
> 

Regards

Marco
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLnjrSAAoJEN9yMHEBd2HnPN4H/Assjx+i7smQklOnrTL+KQ0M
ngzjpbw1AwodjOnX8MtHgMm9/qiE7fsRTLGOxi3t+iQo8918eU8eDvt9sKv0vqji
MqwirctgtIoVJFeRD+i18a2JsPyy8mE6aT4dELC3qgQCJAIYd5WbHKeBpfcSzLBx
48/3VR6+jvixtoHi7Szw1uaBeJWrdBjTtz9VDDW5hooa3iPi0cpOCkshipdHXNLF
b9bD83omEnxbAPV3deEZ1SWRE+fa0tHAEwcZFXkUIfqbNCcDm5KOPBzKNm4LI/yG
nr1dFazWrvu8bO9iReXlDY7OLKND36COTuRVa99LocwTn3MvN21C3vsIZYGgsF0=
=hj+F
-----END PGP SIGNATURE-----



More information about the dns-operations mailing list