Recommended Posts

Are you jumping around with IPs like crazy?? Why in the world would the TTL for both the NS and A and cname be 60 seconds?

I was looking at dns queries -- and couldn't figure out why so many to neowin. Then I took a look at the ttl

******

;; ANSWER SECTION:

www.neowin.net. 60 IN CNAME neowin.net.

neowin.net. 60 IN A 74.204.71.245

neowin.net. 60 IN A 74.204.71.246

neowin.net. 60 IN A 74.204.71.247

;; AUTHORITY SECTION:

neowin.net. 60 IN NS ns3.neowin.net.

neowin.net. 60 IN NS ns1.neowin.net.

neowin.net. 60 IN NS ns2.neowin.net.

;; ADDITIONAL SECTION:

ns1.neowin.net. 60 IN A 74.204.71.249

ns2.neowin.net. 60 IN A 74.204.71.250

ns3.neowin.net. 60 IN A 208.43.57.26

********

Unless these IP are changing every couple of minutes -- why such a low TTL? Even freaking google does not have a 60 second ttl.

;; ANSWER SECTION:

www.google.com. 604800 IN CNAME www.l.google.com.

www.l.google.com. 300 IN A 74.125.225.146

www.l.google.com. 300 IN A 74.125.225.147

www.l.google.com. 300 IN A 74.125.225.144

www.l.google.com. 300 IN A 74.125.225.145

www.l.google.com. 300 IN A 74.125.225.148

See the length of that cname -- thats because they KNOW its not going to change.. Sure the A's that it points to do, so 5 minutes you have to recheck those. But neowin is 1 minute every single dns server on the planet that has users asking for neowin.net have to come and talk to one of the 3 ns every freaking minute. Not counting the extra traffic to re lookup the NS for neowin your causing.

That is just nuts!!!

Link to comment
https://www.neowin.net/forum/topic/1074747-who-manages-dns-for-neowin/
Share on other sites

how often do change the 3 ips you have listed? 300 is still seems WAY to low for such a site.. Why would you want that added dns traffic?

Do you really move IPs that often?? You lower your ttl as you get close to a move - or if you expect an issue where you will be changing IPs on the fly, etc.

I see you bumped up the cname and ns to 6 hours..

But really 5 minutes on these ips

neowin.net. 205 IN A 74.204.71.247

neowin.net. 205 IN A 74.204.71.246

neowin.net. 205 IN A 74.204.71.245

You have been using the same IPs since what aug 2011 or something, this is what netcraft shows. Do you really need the extra dns traffic?

You could be talking some significant amount of bandwidth. I would assume with the number of users for neowin globally - that there is quite a bit of traffic.. Why not make that 5 minutes 1 hour, 12 hours? What are the odds that your IPs are going to change? Really..

Just talking a move to 1 hour vs 5 minutes would cut your dns to 1/12 of its current level??

If you plan a move to new servers or something in the future - then you just lower the ttl as you get close to the cut over. So that there is min amount of time before everyone sees the new ips. But I would think your generating significant traffic to your servers for no reason.

load balanced or just round robin dns? Which is NOT load balancing btw, load distribution sure.. Unless you are using some form of api to change the order of the IPs based returned by your name server upon load on the server at any given moment, than its not load balancing if your only doing it with dns. There are ways to do this -- but I'm pretty sure you just doing the generic round robin order of the 3 ips returned.

Either way your handing out the 3 ips.. Does not mater if you hand them out for 5 minutes or 1 hour or 12.. Your still handing out the 3.. The isp dns once cached will round robin through them.

This is to my server - 3 queries back to back..

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.246

74.204.71.245

74.204.71.247

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.245

74.204.71.247

74.204.71.246

C:\Windows\System32>dig www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.246

74.204.71.245

Notice how the order changes.. This is from my cached server. All within the current ttl.

Does not matter if that ttl is 5 minutes or 12 hours. Still going to change the order every time a client asks. They are just going to ask less often is all -- the order of the ips the given is going to be distributed to the clients in different order. So globally you still get load across all 3 of your servers.

Just look at one isp dns for example - say comcast.

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.246

74.204.71.247

74.204.71.245

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.245

74.204.71.246

C:\Windows\System32>dig @75.75.75.75 www.neowin.net +short

neowin.net.

74.204.71.247

74.204.71.245

74.204.71.246

Order is changed every time I queried it. Now there is nothing saying that client has to go to 1st ip given, but that is normally the case. So now first isp client will go to ip 1, 2nd client that queries would go to ip 2, etc.. So your still distributing the load across the number of clients. Just not having to come ask your server every 5 minutes if the ips changed.

Your distributing the requests across the IPs - this is load distribution. In this case does not matter if you have 5 minute ttl or 12 hour.. Other than load on your DNS!! That is for sure!

You don't need a low ttl to distribute your load across your 3 ips.. But that will for sure generate way more traffic to your dns. That is just not needed..

I have to assume neowin.net has to pay for bandwidth they use?? Right -- so why have more traffic to your servers than needed. You don't need a 300 second ttl to distribute the load across your 3 ips. A 12 hour would do the same thing.

Even if they had 500,000,000 DNS queries per month, it would be less than your average animated .gif on these forums.

Seriously though, the average query is what.. few hundred bytes tops - you might shave a little bandwidth here and there but I doubt it would make much of a difference in the hosting bill for Neowin.

And as for the comparison to "getting nowhere", people who tend to only view minuscule details lack the ability to look at the big picture - if we only dedicated ourselves to examining the most efficient way to do something, we would have spent so much time trying to perfect things we would have gotten nowhere either.

So 500 million queries * 100 bytes = 50GB of traffic.. What you don't think they pay for that? Why not make it 4GB with one simple change to 1 hour vs 5 minutes on their ttl?

And your talking more than 100bytes, with just the simple query for www.neowin.net returns

;; MSG SIZE rcvd: 207

So with your 500 million example your talking 103GBytes of traffic. This is nothing to sneeze at.. And I would bet they are seeing way more than 500 million queries a month to be honest..

So 500 million queries * 100 bytes = 50GB of traffic.. What you don't think they pay for that? Why not make it 4GB with one simple change to 1 hour vs 5 minutes on their ttl?

And your talking more than 100bytes, with just the simple query for www.neowin.net returns

;; MSG SIZE rcvd: 207

So with your 500 million example your talking 103GBytes of traffic. This is nothing to sneeze at.. And I would bet they are seeing way more than 500 million queries a month to be honest..

Good answer! (Y)

PING neowin.net (74.204.71.247): 56 data bytes

64 bytes from 74.204.71.247: icmp_seq=0 ttl=51 time=121.680 ms

64 bytes from 74.204.71.247: icmp_seq=1 ttl=51 time=123.945 ms

64 bytes from 74.204.71.247: icmp_seq=2 ttl=51 time=133.143 ms

--- neowin.net ping statistics ---

3 packets transmitted, 3 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 121.680/126.256/133.143/4.957 ms

Neowin seems to have connection issues. If I compare this result with say google:

PING google.com (173.194.34.166): 56 data bytes

64 bytes from 173.194.34.166: icmp_seq=0 ttl=57 time=28.229 ms

64 bytes from 173.194.34.166: icmp_seq=1 ttl=57 time=37.363 ms

--- google.com ping statistics ---

2 packets transmitted, 2 packets received, 0.0% packet loss

round-trip min/avg/max/stddev = 28.229/32.796/37.363/4.567 ms

ping times and dns are not related -- if neowin is farther way from you than google, then yeah its going to be a longer ping to them.

Google has servers all over the planet - so I would hope the would be closer to you then neowin -- which only has the servers in 1 location.

I'll be honest, I've been having loads of connection issues with neowin and neogamr in the past few weeks.. loads of server not responding pages.. But I've just not really had time or motivation to report it. xP

I'm going to close this, as it seems to just be inviting unneeded attacks against an undeserving member.

BudMan is indeed correct with his point, and I thank him for bringing it to our attention. I have raised the TTL for most records as I said earlier. I realise the setting of the A records for neowin.net. at 300 may seem a little low, but trust me, it's like that intentionally, and for good reason.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • AltSendme 0.4.1 by Razvan Serea AltSendme is a minimal, cross-platform application designed for fast, secure, and private peer-to-peer file transfers. It allows users to send files or entire directories directly between devices without relying on cloud servers, accounts, or any personal information. Everything is encrypted end-to-end using modern protocols like QUIC and TLS 1.3, ensuring both strong security and low-latency performance. Transfers are verified with BLAKE3 for data integrity, and interrupted downloads automatically resume, making the experience reliable even on unstable connections. You can transfer anything—images, videos, documents, and more. Integrity checks are performed on both ends, so your files are automatically verified for correctness during both sending and receiving. AltSendme works seamlessly across local networks or long-distance links, capable of saturating multi-gigabit connections for extremely fast delivery. With built-in NAT traversal and encrypted relay fallback, it connects devices almost anywhere. The app integrates with the Sendme CLI and will soon support mobile and web platforms. Fully free and open-source, AltSendme offers a lightweight, privacy-first alternative to traditional cloud-based services, removing size limits, upload costs, and unnecessary data exposure. AltSendme 0.4.1 changelog: Release Highlights Self-hosted relays: Run your own iroh relay so transfers don't rely on public infrastructure. Includes a full deployment template in deploy/relay/ with Docker Compose for a VPS and configuration examples for production use. Fly.io support: One-click deploy template for Fly.io, including a quick-start config (fly.dev.toml) for testing without a custom domain, plus production setup with Let's Encrypt and your own hostname. Relay settings UI: New Settings → Network panel to choose how AltSendme connects: automatic public relays, custom self-hosted URLs (with optional auth token), or disabled. Test connections, verify latency, and see live relay status in the footer. Disable relays: Turn off relay servers entirely when you only need same-network transfers (e.g. LAN). Direct connections only. No relay hop required when devices can reach each other. Android graduates from beta: Android is now part of the regular release cycle alongside desktop. APKs ship with each version (universal, arm64, and armv7). Other improvements Private relay access control via shared auth token Relay fallback notifications when a custom relay is unreachable Broadcast mode toggle in sharing settings Android release build fixes (split-per-ABI APKs, universal APK preservation) UI polish: mobile safe-area insets, dropzone layout, transfer progress animation Bug fixes for minification-related serialization issues and system tray icon loading What's Changed feat(relay): add relay status functionality and settings UI (a120cdf) feat(relay): implement custom relay server configuration and verification (51276c7) feat(relay): add configuration for private relay access and enhance observability features (48fbabf) feat(relay): enhance relay URL validation, display connection status (d4fffa0) feat(relay): add RelayChangeGuard component and enhance relay-related translations (16ba514) feat(broadcast): add toggle setting for broadcast mode in sharing UI (ca6d977) fix(relay): correct QUIC discovery port, pin image, templatize fly.dev (52a2ba5) fix: More broken serialization due to minification (67491a9) fix(android): preserve true universal APK across per-ABI builds (e9f256f) fix(ui): conditional safe-area insets padding on mobile (1182f0e) refactor(transfer): CircularRing component animation fix (944572b) chore(android): drop x86 and x86_64 release APKs, keep universal+arm64+armv7 (34ada0b) Download: AltSendme 0.4.1 | ARM64 | ~9.0 MB (Open Source) Download: AltSendme for MacOS | Android Links: AltSendme Home Page | GitHub | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • You are mostly right about the ephemeral nature of it. As I mention in the article, if you dont add a second device or take a backup of your account before uninstalling it, then yes you will lose access to your account. That said, in terms of actual user experience when you sync multiple devices your message history carries across and there's also a Saved Messages chat like there is on Telegram to send messages and attachments between your installs. But yh, what you point out are correct and its not trying to emulate Messenger or Telegram.
    • OK so SearXNG is a meta search engine that you can install locally or use via a public instance. It scrapes other search engines which you choose and then sorts the results. Not as complicated as multiple relays
    • The only difference here is that you think you came up with these reasons. You didn't. These age old fearmongering lies (that were NEVER true) were funded by and the anger stoked by Putin through proxies like Farage (and later in the USA, Trump) and filtered down through the skinheads, Neonazis, etc. until it reached the uninformed, ignorant, and gullible -- never realizing they were being played for fools against their own best interests. Even now, despite all of the EVIDENCE proving that Brexit was a terrible mistake for ALL citizens of the UK and that its supporters were tricked by Putin's proxies into sabotaging their own nation, you're still here defending these well-known lies as if they were ever true. Not only are they not true. They NEVER were. So, when are you going to realize that you were lied to and actually get angry at the liars and charlatans who lied to you, instead of blaming the innocent people they lied to you about?
    • Dupe of "Microsoft further improving Windows 11 Taskbar with latest builds", published <20 minutes apart
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      495
    2. 2
      +Edouard
      225
    3. 3
      PsYcHoKiLLa
      152
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!