[bind10-dev] About resolver Negative Cache Design

Michael Graff mgraff at isc.org
Fri Feb 18 23:54:43 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2011-02-18 5:51 PM, Jerry Scharf wrote:
> Depending on the situation, I have seen 10-40% negative answers on
> recursive servers. One survey respondent said he had 40% NXDOMs alone.
> Others may have different numbers. So negative answers are very common
> in the real world. This is also a reason why people want to add negative
> entries that last more than 10 minutes (like forever.)

They say they want that, then we get people who ask us why a name fails
even when it has been changed in their DNS.  Not everyone gets how
negative caching works today.  I would be very worried about a "forever"
negative entry.

How many of those NXDOMAIN entries were for AAAA records btw?  I know
those are usually NODATA/NOANSWER form of negative caching, but I wonder.

- --Michael


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1fBsIACgkQLdqv0r6eD6b2JgCfYJia+yv0ayIxC0VBTrybpxw0
oeYAnj+1vzVMFafRB793evdljzpl2N9E
=mbN8
-----END PGP SIGNATURE-----



More information about the bind10-dev mailing list