4 ms·
You can query DNS root server. https://www.iana.org/domains/root/servers https://www.iana.org/domains/root/servers And use long TTL time with large cache size.
by pavs 9y ago
You can query DNS root server.
https://www.iana.org/domains/root/servers https://www.iana.org/domains/root/servers
And use long TTL time with large cache size.
Other than some small edge cases, this is pretty much the most secure and fastest DNS performance you will have, in most instances getting about 1 or <1ms speed. Depending on DNS server you can even have both root servers and resolver configured.
I have been using unbound for at least 4 years. Simple and fast.
- jamra 9y agoOk I'm going to try and set up Cloudflare's DNS setup in Go to point to those root servers and see what I get. Is there a different DNS server you would recommend? I don't think my usage requires anything special.
- pavs 9y agoBIND is the industry standard - but insanely overkill for your use case. Unbound is very easy and lightweight. Dnsmasq is another option, but I don't think you can setup root server with it.
- arca_vorago 9y agoIt is also very easy to do this with dnsmasq or powerdns, djbdns, etc. I'm increasingly beginning to think that every node should be it's own dns so it's cache blacklist can be verified (checksums?) per node instead of per request to the dns provider.