Recommended Posts

Are you jumping around with IPs like crazy?? Why in the world would the TTL for both the NS and A and cname be 60 seconds?

I was looking at dns queries -- and couldn't figure out why so many to neowin. Then I took a look at the ttl

******

;; ANSWER SECTION:

www.neowin.net. 60 IN CNAME neowin.net.

neowin.net. 60 IN A 74.204.71.245

neowin.net. 60 IN A 74.204.71.246

neowin.net. 60 IN A 74.204.71.247

;; AUTHORITY SECTION:

neowin.net. 60 IN NS ns3.neowin.net.

neowin.net. 60 IN NS ns1.neowin.net.

neowin.net. 60 IN NS ns2.neowin.net.

;; ADDITIONAL SECTION:

ns1.neowin.net. 60 IN A 74.204.71.249

ns2.neowin.net. 60 IN A 74.204.71.250

ns3.neowin.net. 60 IN A 208.43.57.26

********

Unless these IP are changing every couple of minutes -- why such a low TTL? Even freaking google does not have a 60 second ttl.

;; ANSWER SECTION:

www.google.com. 604800 IN CNAME www.l.google.com.

www.l.google.com. 300 IN A 74.125.225.146

www.l.google.com. 300 IN A 74.125.225.147

www.l.google.com. 300 IN A 74.125.225.144

www.l.google.com. 300 IN A 74.125.225.145

www.l.google.com. 300 IN A 74.125.225.148

See the length of that cname -- thats because they KNOW its not going to change.. Sure the A's that it points to do, so 5 minutes you have to recheck those. But neowin is 1 minute every single dns server on the planet that has users asking for neowin.net have to come and talk to one of the 3 ns every freaking minute. Not counting the extra traffic to re lookup the NS for neowin your causing.

That is just nuts!!!

Link to comment
https://www.neowin.net/forum/topic/1074747-who-manages-dns-for-neowin/
Share on other sites

how often do change the 3 ips you have listed? 300 is still seems WAY to low for such a site.. Why would you want that added dns traffic?

Do you really move IPs that often?? You lower your ttl as you get close to a move - or if you expect an issue where you will be changing IPs on the fly, etc.

I see you bumped up the cname and ns to 6 hours..

But really 5 minutes on these ips

neowin.net. 205 IN A 74.204.71.247

neowin.net. 205 IN A 74.204.71.246

neowin.net. 205 IN A 74.204.71.245

You have been using the same IPs since what aug 2011 or something, this is what netcraft shows. Do you really need the extra dns traffic?

You could be talking some significant amount of bandwidth. I would assume with the number of users for neowin globally - that there is quite a bit of traffic.. Why not make that 5 minutes 1 hour, 12 hours? What are the odds that your IPs are going to change? Really..

Just talking a move to 1 hour vs 5 minutes would cut your dns to 1/12 of its current level??

If you plan a move to new servers or something in the future - then you just lower the ttl as you get close to the cut over. So that there is min amount of time before everyone sees the new ips. But I would think your generating significant traffic to your servers for no reason.

load balanced or just round robin dns? Which is NOT load balancing btw, load distribution sure.. Unless you are using some form of api to change the order of the IPs based returned by your name server upon load on the server at any given moment, than its not load balancing if your only doing it with dns. There are ways to do this -- but I'm pretty sure you just doing the generic round robin order of the 3 ips returned.

Either way your handing out the 3 ips.. Does not mater if you hand them out for 5 minutes or 1 hour or 12.. Your still handing out the 3.. The isp dns once cached will round robin through them.

This is to my server - 3 queries back to back..

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.246

74.204.71.245

74.204.71.247

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.245

74.204.71.247

74.204.71.246

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.246

74.204.71.245

Notice how the order changes.. This is from my cached server. All within the current ttl.

Does not matter if that ttl is 5 minutes or 12 hours. Still going to change the order every time a client asks. They are just going to ask less often is all -- the order of the ips the given is going to be distributed to the clients in different order. So globally you still get load across all 3 of your servers.

Just look at one isp dns for example - say comcast.

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.246

74.204.71.247

74.204.71.245

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.245

74.204.71.246

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.245

74.204.71.246

Order is changed every time I queried it. Now there is nothing saying that client has to go to 1st ip given, but that is normally the case. So now first isp client will go to ip 1, 2nd client that queries would go to ip 2, etc.. So your still distributing the load across the number of clients. Just not having to come ask your server every 5 minutes if the ips changed.

Your distributing the requests across the IPs - this is load distribution. In this case does not matter if you have 5 minute ttl or 12 hour.. Other than load on your DNS!! That is for sure!

You don't need a low ttl to distribute your load across your 3 ips.. But that will for sure generate way more traffic to your dns. That is just not needed..

I have to assume neowin.net has to pay for bandwidth they use?? Right -- so why have more traffic to your servers than needed. You don't need a 300 second ttl to distribute the load across your 3 ips. A 12 hour would do the same thing.

Even if they had 500,000,000 DNS queries per month, it would be less than your average animated .gif on these forums.

Seriously though, the average query is what.. few hundred bytes tops - you might shave a little bandwidth here and there but I doubt it would make much of a difference in the hosting bill for Neowin.

And as for the comparison to "getting nowhere", people who tend to only view minuscule details lack the ability to look at the big picture - if we only dedicated ourselves to examining the most efficient way to do something, we would have spent so much time trying to perfect things we would have gotten nowhere either.

So 500 million queries * 100 bytes = 50GB of traffic.. What you don't think they pay for that? Why not make it 4GB with one simple change to 1 hour vs 5 minutes on their ttl?

And your talking more than 100bytes, with just the simple query for www.neowin.net returns

;; MSG SIZE rcvd: 207

So with your 500 million example your talking 103GBytes of traffic. This is nothing to sneeze at.. And I would bet they are seeing way more than 500 million queries a month to be honest..

So 500 million queries * 100 bytes = 50GB of traffic.. What you don't think they pay for that? Why not make it 4GB with one simple change to 1 hour vs 5 minutes on their ttl?

And your talking more than 100bytes, with just the simple query for www.neowin.net returns

;; MSG SIZE rcvd: 207

So with your 500 million example your talking 103GBytes of traffic. This is nothing to sneeze at.. And I would bet they are seeing way more than 500 million queries a month to be honest..

Good answer! (Y)

PING neowin.net (74.204.71.247): 56 data bytes

64 bytes from 74.204.71.247: icmp_seq=0 ttl=51 time=121.680 ms

64 bytes from 74.204.71.247: icmp_seq=1 ttl=51 time=123.945 ms

64 bytes from 74.204.71.247: icmp_seq=2 ttl=51 time=133.143 ms

--- neowin.net ping statistics ---

3 packets transmitted, 3 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 121.680/126.256/133.143/4.957 ms

Neowin seems to have connection issues. If I compare this result with say google:

PING google.com (173.194.34.166): 56 data bytes

64 bytes from 173.194.34.166: icmp_seq=0 ttl=57 time=28.229 ms

64 bytes from 173.194.34.166: icmp_seq=1 ttl=57 time=37.363 ms

--- google.com ping statistics ---

2 packets transmitted, 2 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 28.229/32.796/37.363/4.567 ms

ping times and dns are not related -- if neowin is farther way from you than google, then yeah its going to be a longer ping to them.

Google has servers all over the planet - so I would hope the would be closer to you then neowin -- which only has the servers in 1 location.

I'll be honest, I've been having loads of connection issues with neowin and neogamr in the past few weeks.. loads of server not responding pages.. But I've just not really had time or motivation to report it. xP

I'm going to close this, as it seems to just be inviting unneeded attacks against an undeserving member.

BudMan is indeed correct with his point, and I thank him for bringing it to our attention. I have raised the TTL for most records as I said earlier. I realise the setting of the A records for neowin.net. at 300 may seem a little low, but trust me, it's like that intentionally, and for good reason.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Yup, that's a doozy right there 😄
    • It's a bundle of tools created by a variety of people, so things can go wrong sometimes. It's a great addition to Windows, and I use a lot of the tools on a daily basis. Also, it's still a 0.**** release so quick updates are to be expected 😉
    • Oh, I did. And it's even worse than I was hoping! Besides a lot of techno-babble jargon (yes I understand 100% of it but it's still all just techno-babble) there's 2 key points that make me super-weary about even considering testing this out. -- By default, after installation, a relay is automatically set up, so you do not need to care about that. * Non-chatmail apps use email servers as a long-term message archive while chatmail clients use email servers for ephemeral instant message relay. * Supporting the full variety of classic email setups would require considerable development and maintenance efforts, and complicate making chatmail-based messaging more resilient, reliable and fast. -- Basically, the end-user device is the 'server' (relay) so there is NO ARCHIVING whatsoever because every message is necessarily ephemeral. Great for techno-paranoia (and for illicit activities preferring no tracks to cover) but terrible for everybody else. It's also ironically contradictory to engineering principles of redundancies besides the transport layers due to the explicit absence of any persistent storage. Instead of 'classic email address' retaining multi-GB messaging archives on its server, now every device must retain 100% of those storage demands. (Email messages were originally meant to be short correspondences, not the multi-MB attachments boondoggle that now exists with unlimited spam engines flooding every potential recipient.) Any device swap or reset (or loss) makes the entire message history go bye-bye forever... lest there's an off-device auto-archival "relay" mechanism that's really a separate server that holds onto all transported messages (an email server) that utilizes 'chatmail email address' identities (like an email server) and its own persistent storage archive (like an email server). But... this solution is hoping to exist alongside real-world email address identities (based on the email server relay pathway) but simply render messages in chat thread format in an ephemeral manner (with contents being encrypted, and messages auto-expiring) ... In the end, it's a chat app/experience for the Web3/P2P-at-all-costs zealots. (I have accts on all sorts of federated web3 services so I understand the technical and non-technical alike.) For any practical users, however, it's just another service to download/install, register, cross-share id cards/qr codes, but know that there's no history/archive whatsoever (by design) so no account/message recovery whatsoever... update the device, install a bummed update patch, or dare upgrade your device... all history, poof, gone. Ya gotta start everything over again like they're a brand new person.
    • You've tried DuckDuckGo and Brave Search, now get serious with SearXNG by Paul Hill Over the last decade, it has become quite trendy to dump Google Search in favor of privacy-preserving alternatives such as DuckDuckGo, Startpage, and Brave Search. These search engines have done a very good job at highlighting dodgy practices by Google, such as adjusting search results based on what it thinks you’ll like (filter bubble) and stalking you around the web to advertise to you. While these search engines are good starting points when compared to non-private services like Google, there are still quite a few issues with them. For example, both DuckDuckGo and Brave Search require running non-free JavaScript in your web browser, which is comparable to running proprietary software on your computer, meaning you can be sure about what it’s actually doing in the background. Another issue is that these search engines are hosted on the respective companies’ servers, and you are using a service that you don’t control. Finally, DuckDuckGo, while offering privacy features, relies heavily on Microsoft’s infrastructure for its results and, in the past, has permitted Microsoft tracking scripts. If you are looking for a more private search solution than DuckDuckGo, Brave Search, and Startpage, then I recommend taking a look at SearXNG. It is a privacy-respecting metasearch engine that can be used via different public instances, which is useful for mobile users, or you can install it on your computer or server and run it locally with maximum control. Unlike Google, Bing, or Brave Search, which crawl the web and have their own search indexes, SearXNG is a metasearch engine, meaning it taps other search engines, stripping your identifying data, such as IP address, user agent, and cookies, in the process. Your search query is sent to the other search engines you enable before aggregating the results. SearXNG has deployment flexibility. If you are a casual user or a mobile user and don’t want to run SearXNG locally, you can use a public instance that is hosted by someone else. The main problem with this is that you are putting trust in the maintainer of the instance regarding stuff like logs that they may keep; good hosts should have a privacy policy explaining their policies. If you are trying to use SearXNG, you can also install the software on your device and then head to 127.0.0.1:8080 in your browser and search from there. While you don’t have to worry about a third-party admin like the public instances, search engines could ultimately block your IP address if they frown on you pulling in their search results locally. If you want to run it locally, it’s a good idea to use proxies or VPNs to hide your actual IP. You don’t have to worry about this with a public instance, as search engines never see your IP address. The main privacy benefit of using SearXNG is that it isolates your identity from the underlying engines that it’s capable of searching, such as Google and Bing. These search engines will only see requests coming from a generic server, so they can’t profile you and create a bubble filter that influences what results you see. This also ensures that your search engine doesn’t turn into an echo chamber that prevents you from reading alternative points of view. As a free software project, you are allowed to inspect SearXNG to make sure there are no negative features bundled inside. This sets it apart from the privacy search engines mentioned earlier because you can’t check their source code. As a meta search engine, you are not restricted to getting results from one source. Due to the fact that it scrapes content from other websites, your SearXNG instance will periodically get blocked from different providers, so it’s good to select a range of sources as a backup. While enabling all of the services will give you great results, this can make searching slower. I am personally happy with slower searches for the best results, but you can always check which providers are slowing down your search from the search results page and disable them to speed things up. If you want decent results quickly, enable the main search providers such as Google, Brave, DuckDuckGo, Qwant, Bing, and Yahoo. This way, you get wide coverage without the latency. On the Engines tab in Preferences, do note that there are different tabs, such as General, Images, and Videos, with their own providers that can be toggled and are not covered by "Enable all" while on the General tab, so be sure to dig into each. Just a note, if you want to enable everything, press "Enable all" in one tab, then hit save at the bottom of the page, then do the next tab, and so on. If you press "Enable all", then do that in each tab, and then save, nothing will stick. When I had just some of the search engines enabled, I searched “define nefarious” and results came back with the definition of “define” - obviously that was a sucky result. However, when I had everything enabled, it found dictionary pages for the word “nefarious” and even had an inline definition on the sidebar, which is quite nice too - that was delivered by WolframAlpha for anyone wondering! Probably the worst thing about this meta search engine is that the engines you select are saved with a cookie, so you must enable them on every new device you use SearXNG on, including if you decide to go into incognito mode with your web browser. Honestly, I would say this is the most annoying aspect, and perhaps if your browser lets you choose a separate private browsing search engine, then it would be best to use DuckDuckGo for this portion of your browsing. Another weakness of SearXNG is the random blocking of it by search providers. When you are on the results page, expand the “Response time” box, and it will show things like “Suspended: too many requests” or “access denied”. This is why it is good to enable several providers so that there is always a fallback to get results from. I won’t pretend SearXNG will be for everyone, however, if you enable all of the providers and put up with the slower response time, the results can be really amazing. Even if you don’t want to use it as your daily driver, keeping a bookmark handy that links to it is a good idea if you ever feel like doing a deep dive into a niche topic where other search engines are just failing to bring up any good result, due to the amount of sources it looks on. If you’re interested in radical user control over the software you use, installing SearXNG locally can also be a good idea, but be prepared to be temporarily blocked from sites if you trigger bot sensors without a VPN. Personally, I’ve opted to use a public instance, rather than install it myself. If you want to use it via a public instance, head over to searx.space to find a provider. Let us know in the comments if you have used SearXNG or its predecessor, Searx. What do you think about the quality of the results?
    • Dear Neowin, If it is not too much trouble, can you start using the new-ish designations for Insider Preview? "Experimental" is different than "former Dev" as it can apply to different models, eg 26H1 or 26H2 etc, right? No need to seed confusion IMHO. And, please "finally" update your graphics. OK?
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      503
    2. 2
      +Edouard
      226
    3. 3
      PsYcHoKiLLa
      158
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!