From: Florian Weimer <fweimer@redhat.com>
To: David Howells <dhowells@redhat.com>
Cc: linux-nfs@vger.kernel.org, linux-cifs@vger.kernel.org,
linux-afs@lists.infradead.org, ceph-devel@vger.kernel.org,
keyrings@vger.kernel.org, netdev@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: Re: [PATCH] dns: Apply a default TTL to records obtained from getaddrinfo()
Date: Tue, 19 May 2020 14:17:55 +0000 [thread overview]
Message-ID: <87blmkgga4.fsf@oldenburg2.str.redhat.com> (raw)
In-Reply-To: <158981176590.872823.11683683537698750702.stgit@warthog.procyon.org.uk> (David Howells's message of "Mon, 18 May 2020 15:22:45 +0100")
* David Howells:
> Fix this to apply a default TTL of 10mins in the event that we haven't got
> one. This can be configured in /etc/keyutils/key.dns_resolver.conf by
> adding the line:
>
> default_ttl: <number-of-seconds>
>
> to the file.
If the name resolution is not needed continuously, but only for the
connection attempt, I suggest to use a much shorter TTL, like five
seconds or so.
I'm worried that if the implied TTL is too long, some system
administrators will have to figure out how to invalidate the DNS cache.
Thanks,
Florian
WARNING: multiple messages have this Message-ID (diff)
From: Florian Weimer <fweimer@redhat.com>
To: David Howells <dhowells@redhat.com>
Cc: linux-nfs@vger.kernel.org, linux-cifs@vger.kernel.org,
linux-afs@lists.infradead.org, ceph-devel@vger.kernel.org,
keyrings@vger.kernel.org, netdev@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: Re: [PATCH] dns: Apply a default TTL to records obtained from getaddrinfo()
Date: Tue, 19 May 2020 16:17:55 +0200 [thread overview]
Message-ID: <87blmkgga4.fsf@oldenburg2.str.redhat.com> (raw)
In-Reply-To: <158981176590.872823.11683683537698750702.stgit@warthog.procyon.org.uk> (David Howells's message of "Mon, 18 May 2020 15:22:45 +0100")
* David Howells:
> Fix this to apply a default TTL of 10mins in the event that we haven't got
> one. This can be configured in /etc/keyutils/key.dns_resolver.conf by
> adding the line:
>
> default_ttl: <number-of-seconds>
>
> to the file.
If the name resolution is not needed continuously, but only for the
connection attempt, I suggest to use a much shorter TTL, like five
seconds or so.
I'm worried that if the implied TTL is too long, some system
administrators will have to figure out how to invalidate the DNS cache.
Thanks,
Florian
next prev parent reply other threads:[~2020-05-19 14:17 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-18 14:22 [PATCH] dns: Apply a default TTL to records obtained from getaddrinfo() David Howells
2020-05-18 14:22 ` David Howells
2020-05-18 15:51 ` Ben Boeckel
2020-05-18 15:51 ` Ben Boeckel
[not found] ` <20200518155148.GA2595638-c5pJSKvn3zNoShX0ae22vCpPbLvvZHD8LbaKZrMw/B4@public.gmane.org>
2020-05-19 13:39 ` David Howells
2020-05-19 13:39 ` David Howells
2020-05-19 13:39 ` David Howells
2020-05-19 14:14 ` Ben Boeckel
2020-05-19 14:14 ` Ben Boeckel
2020-05-19 16:06 ` David Howells
2020-05-19 16:06 ` David Howells
[not found] ` <1512927.1589904409-S6HVgzuS8uM4Awkfq6JHfwNdhmdF6hFW@public.gmane.org>
2020-05-19 16:24 ` Ben Boeckel
2020-05-19 16:24 ` Ben Boeckel
2020-05-19 16:24 ` Ben Boeckel
2020-05-20 15:07 ` Jeff Layton
2020-05-20 15:07 ` Jeff Layton
2020-05-19 14:17 ` Florian Weimer [this message]
2020-05-19 14:17 ` Florian Weimer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87blmkgga4.fsf@oldenburg2.str.redhat.com \
--to=fweimer@redhat.com \
--cc=ceph-devel@vger.kernel.org \
--cc=dhowells@redhat.com \
--cc=keyrings@vger.kernel.org \
--cc=linux-afs@lists.infradead.org \
--cc=linux-cifs@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-nfs@vger.kernel.org \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.