also sprach Robert Edmonds <edmo...@debian.org> [2010.02.01.1411 +1300]: > i think you are mistaken. in practice, unbound (or bind or any > other reasonably compliant full service DNS resolver / cache) only > sends occasional queries to the root; running unbound in normal > recursive full service mode doesn't "hammer" the roots. > delegations and glue from the root zone have quite long TTLs (2 > days).
Yes, I am aware of that. But I have to refetch the delegations and glue every time I update unbound. Granted, on a server that's hardly the case, but on laptops/workstations it is. I don't know how many would run unbound on a workstation, but I still prefer to go the recursive way for most use-cases. -- .''`. martin f. krafft <madd...@d.o> Related projects: : :' : proud Debian developer http://debiansystem.info `. `'` http://people.debian.org/~madduck http://vcs-pkg.org `- Debian - when you have better things to do than fixing systems * Overfiend came out of the womb complaining. -- #debian-devel
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)