[bind10-dev] hardwiring negative cache entries

Jerry Scharf scharf at isc.org
Sun Nov 28 19:59:31 UTC 2010


Michael,

RPZ is definitely one instance of this. I am not sure that RPZ as it is 
will be general enough for all the user requirements. This looks like 
one of those things that seems to want a spec developed by both 
development and marketing. It will also want to include the operational 
control aspects which are near and dear to my heart.

jerry

On 11/28/2010 5:08 AM, Michael Graff wrote:
> Sounds like Paul's RPZ.
>
> --Michael (from an iPhone)
>
>
> On Nov 28, 2010, at 1:01, Jerry Scharf<scharf at isc.org>  wrote:
>
>> This is something for the recursive team to think about.
>>
>> Larissa and I did a survey and we asked people about the features they would like. One came across that I wanted to share with the recursive team. I'm not suggesting that the feature be built at any time, but that the cache model allow for something like this.
>>
>> The person said that 40% of their queries are for domains that don't exist. This has a huge negative impact on the recursive server capacity. To solve it, they have created local authoritative zones that return errors and make the performance close to normal. They wanted some way to do this without having to create and operate all these fake zones.
>>
>> What that translated to in my mind was the ability to permanently wire negative cache entries in via some form of configuration and/or datastore. I can see all sorts of operational benefits to having this and it could be a motivation to move to BIND 10.
>>
>> I am not suggesting that any work be done on this. Rather I was thinking that as you go about designing the caching for the recursive server, just be aware that some day this may want to be added. A bit of forethought now could save significant work later.
>>
>> jerry s
>>
>> _______________________________________________
>> bind10-dev mailing list
>> bind10-dev at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind10-dev




More information about the bind10-dev mailing list