Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.project > #8572

Re: DNS Qname minimisation

From Ian Jackson <ijackson@chiark.greenend.org.uk>
Newsgroups linux.debian.project
Subject Re: DNS Qname minimisation
Date 2016-03-24 02:30 +0100
Message-ID <rg2g2-3vC-7@gated-at.bofh.it> (permalink)
References <rfTcK-5vE-15@gated-at.bofh.it> <rg0xz-2kC-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Robert Edmonds writes ("Re: DNS Qname minimisation"):
> DNS qname minimisation is already available in Debian; unbound 1.5.8 in
> testing and jessie-backports has support for it, which can be enabled by
> adding the following config snippet to /etc/unbound/unbound.conf.d/:
> 
>     server:
>         qname-minimisation: yes

Perhaps we should enable it by default ?  Debian testing is a good
place for such things I think.  If the authors/promoters of qname
minimisation think it is ready for deployment soon, then maybe the
Debian unbound maintainers should be consulted.  (Or indeed, unbound
upstream.)

I did have one question for Hugo: is there a conventional optimisation
or compromise in the qname minimisation for ip6.arpa lookups ?
Without such a thing, the large number of labels in an ip6.arpa
lookup, compared to the usually comparatively small number of zone
cuts, would mean a big performance hit.

Eg (picking my server's primary IPv6 address):

0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.e.1.0.8.a.b.0.1.0.0.2.ip6.arpa PTR
                                        3.e.1.0.8.a.b.0.1.0.0.2.ip6.arpa SOA
                                                8.a.b.0.1.0.0.2.ip6.arpa SOA
                                                    b.0.1.0.0.2.ip6.arpa SOA
                                                                ip6.arpa SOA

Ian.

Back to linux.debian.project | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

DNS Qname minimisation Hugo Maxwell Connery <hmco@env.dtu.dk> - 2016-03-23 16:50 +0100
  Re: DNS Qname minimisation Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-03-23 17:30 +0100
  Re: DNS Qname minimisation Robert Edmonds <edmonds@debian.org> - 2016-03-24 00:40 +0100
    Re: DNS Qname minimisation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2016-03-24 02:30 +0100
      Re: DNS Qname minimisation Ondřej Surý <ondrej@sury.org> - 2016-03-24 10:50 +0100
        Re: DNS Qname minimisation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2016-03-24 17:50 +0100
      Re: DNS Qname minimisation Henrique de Moraes Holschuh <hmh@debian.org> - 2016-03-28 20:20 +0200
        Re: DNS Qname minimisation Florian Weimer <fw@deneb.enyo.de> - 2016-03-28 22:00 +0200
          Re: DNS Qname minimisation Ondřej Surý <ondrej@sury.org> - 2016-03-31 22:00 +0200

csiph-web