Install a DNS resolver on your laptop

http://carlos.bueno.org/2009/02/protip-install-dns-resolver-on-your.html

by aristus • 17 years ago

49 34 17 years ago

carlos.bueno.org

chiffonade3• 17 years ago

Protip: Skip configuring BIND and use UUNet's original name servers (which are blazingly fast and still maintained) because you've been staring at DNS settings for so god damn long they've been burning into your brain for the past 15 years.

Protip #2: Also learn to configure your DHCP client so this is possible.

extantproject• 17 years ago

4.2.2.1

timf6• 17 years ago

These are the ones I usually use too, level3, 4.2.2.[1-6]

aristus• 17 years ago

That will work too. But I think it's more polite to do it the hard way. Same reason you used to set up your own time server and package server for your farm.

chiffonade3• 17 years ago

> More polite

No, this intuition is incorrect.

By using one of UUNet's (or someone else's) public caching name servers, you're increasing the cache diversity in a very widely used public cache and reducing the overall load on the global root name servers AND domain-level authority servers by reducing cache misses and reducing query traffic in a cumulative manner.

Think about it in terms of extremes/limits. If everyone on the internet ran their own server, would the root infrastructure slow down or speed up?

Personally I think it's somewhat insane and counterproductive to setup a DNS server on your laptop - not only are you wasting your own CPU cycles, you're wasting the CPU cycles of the root name servers and CPU cycles of the domain-level authority servers. Why do that when there are numerous public cache servers setup specifically for this very purpose?!

There's a reason those massive cache servers are accessible by the public internet. They help it work.

timf6• 17 years ago

The link recommends dnscache. For my laptop, I like dnsmasq instead which is really easy to configure and serves the same purpose, but also serves answers from /etc/hosts and serves as a DHCPd.

Having a quick DHCP solution is handy because I often find myself piping my wireless net to another computer via ethernet cable. Also good for virtual machines.

prakash• 17 years ago

This is really important, alas, you only know it when your ISP has really sucky DNS, and keeps timing out.

The other reason which you might or might not be aware of is that many CDN's use dns to map you to one of their servers, and using a resolver instead of open dns directly is the best way to go.

paul_houle• 17 years ago

My DSL provider is pretty good in some ways, but the DNS service has some drawbacks:

(i) It used to be ~slow~, slow enough that my broadband connection felt worse than dialup, (ii) Failed DNS queries get pointed to a server that serves up contextual ads.

The second is obnoxious when you're browsing the web, but it's completely unacceptable when you're doing projects where you expect certain DNS queries to fail.

djb's dnscache is a sweet answer to the problem.

mikeyur2• 17 years ago

I use OpenDNS and it works well for me most of the time. I may give this a shot though in the future.

nuclear_eclipse• 17 years ago

Ever since I switched my pfSense router machine to using OpenDNS as it's authority, rather than Time Warner's servers, I've noticed a much faster response time, especially when hitting a domain that the router has in its cache. I've never looked back, and even went as far as to set my laptop to use OpenDNS whenever I'm not at home. Couldn't be happier. :)

jws• 17 years ago

Another good reason: While traveling recently, several times I got to places with intentionally free wifi that failed to advertise a DNS server. If you use your own DNS server then these access points are usable.

You could also remember the IP of a usable DNS server elsewhere on the internet.

lazyant• 17 years ago

4.2.2.1, 4.2.2.2

FlorinAndrei• 17 years ago

Yup, running your own local DNS cache is almost always better than the ISP-supplied resolvers.

Note: I used to run DJB's software a lot, back in the '90s especially, when there was no secure alternative. But nowadays there's no point in doing that. Bind has cleaned up their act, it's secure and usable enough nowadays.

tptacek4• 17 years ago

And the evidence you have for this is what? 2008 was not a great year in the history of BIND security.

blasdel6• 17 years ago

The publicity around your 'leak' didn't help much :)

tlrobinson• 17 years ago

What's the advantage of running your own resolver over just setting your DNS servers to something like OpenDNS?

timf6• 17 years ago

My reasons:

- Centralize DNS settings to one place for my mini-itx (that I take to coffeeshops with me and pipe through my laptop) and any VMs running on that machine or my laptop.

- Centralize ad-hoc and "rigged" hostname settings for all these things, my local /etc/hosts names are all propagated to anything using the server.

- Non multi-machine consideration: caching. There's almost zero overhead to setting up dnsmasq, may as well take advantage of a local dns cache (browser cache is only good for web browsing). I can tell the difference, especially on some networks.

timf6• 17 years ago

I just realized people are hung up on the resolving part of that link and not the "on laptop cache" part.

I don't think there's any compelling reason to run an actual resolver (as opposed to a local cache that recurses to a reliable, non-monetizing public cache).

tptacek4• 17 years ago

Comparable performance over time, slightly greater reliability, no reliance on a third party or exposure to whatever they do to monetize their service, and slightly less courtesy to the root server maintainers who would otherwise be shielded from your traffic.

est• 17 years ago

Well if you are an Internet user out side US and you are visiting CDN powered sites via OpenDNS, you will be redirected to US servers, which is much more slower if you use your ISP's DNS

blasdel6• 17 years ago

You get unpoisoned DNS, that's actually 'Open' and 'faster than your ISP'.

OpenDNS is neither. What's so funny about it is that it's the shit that Slashdotters rail against, successfuly marketed back to them.

cos• 17 years ago

Generally, I just use my own (co-located) DNS server from my laptop. However, I sometimes run into problems with wireless providers away from home, especially at airports: sometimes they have it set up such that you have to log in or pay at a URL that they expect the local DNS resolver (which their DHCP will have handed you) to resolve to the local server.

So, for example, foo.someprovider.net when resolved at City Airport using the local DNS server will point to an IP handling payment/login for City Airport, but the very same hostname foo.someprovider.net at OtherCity Airport will resolve to a different IP that happens to be the payment/login server on the local net at OtherCity Airport.

I've run into other instances of this. Basically, not taking the DNS server that DHCP hands you, sometimes causes problems. Usually you can figure out what's happening and change your settings, so it's an annoyance rather than a real failure.

whughes• 17 years ago

4.2.2.1 and 4.2.2.2 have always worked great as DNS servers for me.

timf6• 17 years ago

There's more, 4.2.2.[1-6], these are level3's

I have no idea how they're actually load balanced but everyone always says 1 and 2 so I use the other ones.

blasdel6• 17 years ago

1-3 are always golden for me, but 4-6 are hosted differently and are variable in their decency.

blasdel6• 17 years ago

I've used this set of servers for years, they're the fastest I know of, period. I'll back that up with some data:

              DNS Server | Comcast in Seattle  | The Planet Colo in Dallas
  Level3         4.2.2.X | 11ms ± 1.5ms  5hops | 1ms ± 0.2ms
  OpenDNS 208.67.222.222 | 35ms - 150ms 11hops | 24.9ms ± 0.1ms
  Comcast   68.87.68.162 | 90ms - 250ms 12hops | 23.4ms ± 0.1ms

Hilariously, neither OpenDNS nor Comcast are so variable in ther sluggishness when accessed directly -- The Planet is peered directly with Level3, NTT (OpenDNS's host), and Comcast. On top of that, Comcast is marginally faster than OpenDNS outside their own shitty network! The relative slowness has nothing to do with the servers themselves.

mikeyur2• 17 years ago

Holy crap. I just changed mine to 4.2.2.2 and 4.2.2.3 - my page load times seem like they have doubles. Not even joking.

Thanks for the tip.

Install a DNS resolver on your laptop

Related Stories