ietf-asrg
[Top] [All Lists]

Re: [Asrg] Implementing IPv6 DNSBLs

2010-12-09 15:44:40
Lookup a.b.c.d/32 in zone dnsxl.example:
1) _granularity.dnsxl.example => 16 (may have long TTL)
2) b.a._granularity.dnsxl.example => 24 (may have long TTL)
3) c.b.a._granularity.dnsxl.example => 32 (may have long TTL)
4) d.c.b.a.dnsxl.example => result (TTL depending on type of data, eg
short for blacklist, long for whitelist)

Unless I'm missing something, every lookup for an IPv6 address that's
not in the BL is now 33 or 34 lookups.  That doesn't strike me as a
big win.

Minimizing the number of lookups is not only in the interest of the
DNS cache operators, but also in the DNSxL operators own interest,
because it will also keep the load on the authoritative nameservers at
an acceptable level (or, along the same lines, the number of lookups
on private mirrors).

Quite right, but you have to minimize ALL lookups, not just ones that
find an entry.

R's,
John
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg