[dns-operations] Capturing 8.8.8.8 Traffic

[SM]

Hi Graham,
At 09:26 25-02-2013, Graham Beneke wrote:
>office and NOC to a mom-and-pop IT shop. While I question the wisdom in
>that, I was far more concerned by the fact that this mom-and-pop shop
>had configured Google Public DNS as the resolver for everything on their
>LAN.

A lot of people use 8.8.8.8.  I don't know whether it is due to the 
lemming [1] effect or swarm intelligence.

>Now on my corner of the planet Google DNS is 190ms away. Never mind the
>mess we have with all the CDNs mapping their traffic to a different
>continent.
>
>So what are you thoughts on capturing these queries and answering them
>on local resolvers that are <10ms away?

DNS interception is not a good idea in my opinion.

>The folks at Google are certainly not going to encourage us to spoof
>responses from their servers but are there any other potential pitfalls
>with doing this to save the customers from themselves?

Once that becomes popular the regulator might wish to "standardize" 
it (see draft-iab-filtering-considerations-02).  Saving the customers 
from themselves is a good intention.

Regards,
-sm

1. Lemmings are small rodents that have been known to follow each 
other as they charge to their deaths off the edge of cliffs.  This is 
actually an unsubstantiated myth about lemmings.