"What is every home router would have a persistent TCP connection with the ISP #DNS resolver?" Is it realistic? Could we switch off UDP? #RIPE76

Meausrement: #DNS queries generated with a custom C progrem + #libevent running on Grid5000

At the beginning, the resolver can answer all queries then sustain a fixed rate, even when the queries number increases.

#RIPE76

UDP still 4x better for high query handling, except when there are few TCP clients. #DNS #RIPE76

Best test :-) 6.5 M TCP simultaneous connections to the resolver (Linux and Unbound still work). #RIPE76

Executive summary: DNS over TCP works, and scales. Just buy some hardware. #RIPE76

"Default value was 10, I've set it to 7 millions." #RIPE76 #performance #Unbound #scaling

Another #DNS over TCP+TLS benchmark, by Sara Dickinson.

#RIPE76

Willem Toroop "Who Needs Reasons, When You've Got Heroes?"

Do we need #DNSSEC when we have #TLS? (Executive summary: yes, for instance for redirections - SRV or MX, where TLS does not provide end-to-end security. And of course the biggest flaw of TLS is the CAs, something that DNSSEC+DANE solves.)

#DNS #RIPE76

Tiens, on laisse des gens avec un T-shirt #FFDN parler à une conf d'opérateurs sérieux et professionnels. #RIPE76

@bortzmeyer OUI.

@bortzmeyer Je vais me rouler par terre de fierté tout va bien.

@quota_atypique En tout cas, tout le monde a dit que sa manip était super, à commence par le techos de Google : "awesome"

@bortzmeyer :3 :3 :3

@bortzmeyer N'importe quoi ! Est-ce que je vais faire une conf aux JRES avec un tshirt Framasoft moi ? #OhWait

@bortzmeyer Il y a des t-shirts #FFDN ?

@beaufils En tout cas, il en avait un.

@bortzmeyer dis @zorun tu l'as eu où ce tee-shirt ?

@beaufils @bortzmeyer Faut venir aux AG @federationfdn ;)
(je crois que c'était celle de l'année dernière)