Dns cache

Reply to Dns cache on Thu, 27 Apr 2006 17:15:53 GMT

sullrich — Thu, 27 Apr 2006 17:15:53 GMT

Yeah, that is true. Kinda a catch-22 in that regard, I guess.

Reply to Dns cache on Thu, 27 Apr 2006 06:12:17 GMT

Leoandru — Thu, 27 Apr 2006 06:12:17 GMT

Setting 127.0.0.1 in the general screen has the same effect.

would that make dnsmasq use 127.0.0.1 as the name server seeing that it reads /etc/resolv.conf for the upstream servers?. I think what he is suggesting is that an alternate file be used to tell dnsmasq the name server(s) to use, while telling all other processes on the firewall (except dnsmasq) to use 127.0.0.1 via /etc/resolv.conf. In other words change dnsmasq resolve file to something else other than the default.

Reply to Dns cache on Thu, 27 Apr 2006 04:21:55 GMT

sullrich — Thu, 27 Apr 2006 04:21:55 GMT

Setting 127.0.0.1 in the general screen has the same effect.

Reply to Dns cache on Thu, 27 Apr 2006 03:48:21 GMT

rexster — Thu, 27 Apr 2006 03:48:21 GMT

imho,
a better way using dns cache is telling pfsense that localhost will serve all dns request.
including request by squid and its own use.

right now, if you ssh into pfsense and type (say,) ping yahoo.com
pfsense will use /etc/resolv.conf to resolve the ip address.
that mean it goes directly to assigned dns server.

so, imho, /etc/resolve should have this entry instead:
nameserver 127.0.0.1

this way, instead of go directly to dns server, it try to resolve through dnsmasq cache.

then when it's not in cache, dnsmasq should try to go directly to dns server.
so, we should have entry in dnsmasq.conf something like this:
resolv-file=/etc/realdnsservers

and the /etc/realdnsservers file should contain the dns server obtain from dhcp.

rgds,
dny.

refs:
http://thekelleys.org.uk/dnsmasq/docs/setup.html

Reply to Dns cache on Fri, 07 Apr 2006 13:05:08 GMT

Leoandru — Fri, 07 Apr 2006 13:05:08 GMT

@rexster:

where can i change the default dns cache time out?

how about squid? does squid also use same dns cache?
or does it have its own dns cache? where it's set?

tnx&rgds
rex

you can't change the default ttl on dns records in dnsmasq. I have checked. as for squid it reads resolve.conf for name servers so its uses the same upstream server as dnsmasq. it also creates up to five processes for dnslookup (so yes it has its own cache). In transparent mode a dns lookup is twice as expensive, since its done once by the browser and once again by squid. If you want squid to use dns on the firewall you need to specify that in the squid config with the dns_nameservers option. That way since dnsmasq caches lookups, squid will hit that cache on the next lookup. I verified this by the way and modified my squid_ng.inc to include the option. I should be able to make this an option in the gui provided I get the time this weekend, work has been really demanding of late, don't even have time for myself.