<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><span></span></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div><span></span></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div><span></span></div><div><div dir="ltr"><div class="gmail_extra">We have a medium-sized environment; we have several thousand zones and see high hundreds of millions of DNS queries per day with a ~98% cache hit rate. The several hundred QPS we see between the resolvers and the name servers are what's left. A significant amount of that traffic is for known-low TTL names (GSLB rotors for example), but the sheer number of DNS records (and the number of DNS clients we see) ensures that some queries will still need to be sent to the authoritative name servers.</div><div class="gmail_extra"><br></div><div class="gmail_extra">I'd think that some other high-traffic installations could benefit from this feature (although I am, admittedly, slightly biased). </div><div class="gmail_extra"><br></div><div class="gmail_extra">Thoughts from the devs?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Noah</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 6, 2016 at 9:06 AM, A. Schulze via Unbound-users <span dir="ltr"><<a href="mailto:unbound-users@unbound.net" target="_blank">unbound-users@unbound.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Noah Robin via Unbound-users:<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
In my environment, we have a plant of internal recursive servers for our<br>
data center and separate plants of authoritative servers; something like<br>
65-85% of the traffic outbound from our recursive plants (several hundred<br>
queries/sec per client machine) is destined for our authoritative plants. I<br>
ran some quick benchmarks to compare per-query times for TCP-keepalive<br>
queries vs UDP queries:<br>
</blockquote>
<br></span>
why do you have such a high numer of queries resolver -> nameserver?<br>
<br>
once a resolver fetched a label it should be cached at the resolver.<br>
and would not benefit from any keepalive.<br>
<br>
other options:<br>
- the ttl of labels served by the nameserver is very short and that result in fast<br>
cache expire and need to ask the nameserver again and again<br>
<br>
- the resolver get many queries for differenet nonexisting label<br>
<br>
Andreas<br>
<br>
</blockquote></div><br></div></div>
</div></div></div></body></html>