also sprach Robert Edmonds <edmo...@debian.org> [2010.02.01.1411 +1300]:
> i think you are mistaken.  in practice, unbound (or bind or any
> other reasonably compliant full service DNS resolver / cache) only
> sends occasional queries to the root; running unbound in normal
> recursive full service mode doesn't "hammer" the roots.
> delegations and glue from the root zone have quite long TTLs (2
> days).

Yes, I am aware of that. But I have to refetch the delegations and
glue every time I update unbound. Granted, on a server that's hardly
the case, but on laptops/workstations it is. I don't know how many
would run unbound on a workstation, but I still prefer to go the
recursive way for most use-cases.

-- 
 .''`.   martin f. krafft <madd...@d.o>      Related projects:
: :'  :  proud Debian developer               http://debiansystem.info
`. `'`   http://people.debian.org/~madduck    http://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems
 
* Overfiend came out of the womb complaining.
                                                    -- #debian-devel

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Reply via email to