4 ms·

On a related note, systemd also hardcodes Google's DNS servers: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761658 https://bugs.debian.org/cgi-bin/bugrep

by avian 11y ago

On a related note, systemd also hardcodes Google's DNS servers: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761658 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761658

DiabloD3 11y ago
That in itself I'm not sure I have an issue with 100%... It is the only DNS servers that are guaranteed to have accurate results and respond quickly. The only time I use local DNS inside of my LAN is when I need local LAN entries. The issue I have is it not reading /etc/resolv.conf, but if resolv.conf isn't setup or setup properly, falling back to Google's is a good solution. Also, at my company (we do DDoS mitigated dedicated servers), we deploy servers with Google's set by default: we have access to Google over Equinix IX, going out to 8.8.8.8 responds as fast or faster than it does with bind, dnsmasq, and unbound, even when the entry is clearly already cached, with the DNS cache daemon running on a server in the same rack; and for uncached, Google is usually much faster.
- e12e 11y ago
  Doesn't work so well when you take your laptop with you on travvel to China?
  - DiabloD3 11y ago
    You shouldn't be taking electronics in or out of China, to be honest. Too much evidence that China is successfully MITMing SSL/TLS connections and physically tampering with electronics.
    - deleted 11y ago
      [deleted]
      - Merovius 11y ago
        What other server do you suggest (or do you suggest none, which increases the 70% to 100%)?
        jimktrains2 11y ago
        I suggest no servers. They aren't something that should be hardcoded.
        falcolas 11y ago
        How about their own servers and CDNs? If you're getting the HTML from them, you could also get your JS dependencies from them.
- adsche 11y ago
  Am I missing something? In the linked thread they say it reads /etc/resolv.conf and its entries have precedence.
mineo 11y ago
If by "hardcodes" you mean "can be changed in the configuration file", then yes, that's true.
- e12e 11y ago
  The issue is that if no configuration is available/found/readable things doesn't stop working with a sensible/expected error - but rather enters a new and unexpected (error) state. Error if you didn't want to use Google's resolvers.
Merovius 11y ago
Google's DNS servers are a product meant for public use, i.e. this use. I think it is entirely reasonable to not run your own public DNS servers as an Open Source software and instead use a well-maintained already existing one that has an excellent track-record of availability and low latency.

by avian 11y ago

On a related note, systemd also hardcodes Google's DNS servers: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761658 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761658

DiabloD3 11y ago

That in itself I'm not sure I have an issue with 100%... It is the only DNS servers that are guaranteed to have accurate results and respond quickly. The only time I use local DNS inside of my LAN is when I need local LAN entries. The issue I have is it not reading /etc/resolv.conf, but if resolv.conf isn't setup or setup properly, falling back to Google's is a good solution. Also, at my company (we do DDoS mitigated dedicated servers), we deploy servers with Google's set by default: we have access to Google over Equinix IX, going out to 8.8.8.8 responds as fast or faster than it does with bind, dnsmasq, and unbound, even when the entry is clearly already cached, with the DNS cache daemon running on a server in the same rack; and for uncached, Google is usually much faster.

e12e 11y ago
Doesn't work so well when you take your laptop with you on travvel to China?
- DiabloD3 11y ago
  You shouldn't be taking electronics in or out of China, to be honest. Too much evidence that China is successfully MITMing SSL/TLS connections and physically tampering with electronics.
  - deleted 11y ago
    [deleted]
    - Merovius 11y ago
      What other server do you suggest (or do you suggest none, which increases the 70% to 100%)?
      - jimktrains2 11y ago
        I suggest no servers. They aren't something that should be hardcoded.
      - falcolas 11y ago
        How about their own servers and CDNs? If you're getting the HTML from them, you could also get your JS dependencies from them.
adsche 11y ago
Am I missing something? In the linked thread they say it reads /etc/resolv.conf and its entries have precedence.

mineo 11y ago

If by "hardcodes" you mean "can be changed in the configuration file", then yes, that's true.

e12e 11y ago
The issue is that if no configuration is available/found/readable things doesn't stop working with a sensible/expected error - but rather enters a new and unexpected (error) state. Error if you didn't want to use Google's resolvers.

Merovius 11y ago

Google's DNS servers are a product meant for public use, i.e. this use. I think it is entirely reasonable to not run your own public DNS servers as an Open Source software and instead use a well-maintained already existing one that has an excellent track-record of availability and low latency.