Users免费dns

DNSflagday2019andbeyondhttps://dnsflagday.
netLiborPeltanlibor.
peltan@nic.
cz2019-06-03DeveloperofKnotDNS,open-sourceauthoritativeDNSserverDNSiscomplexRFC1034,1035,1101,1464,1536,1591,1712,1912,1982,1995,1996,2136,2181,2219,2230,2308,2317,2606,2671,2782,2845,2915,3110,3225,3258,3363,3425,3492,3597,3675,4025,4033,4034,4035,4343,4408,4470,4471,4509,4592,4635,4986,5001,5011,5155,5358,5625,5702,5890,5933,5966,6014,6394,6605,6672,6762,6781,6840,6891,7129,7314,7344,7583,7646,7719,7766,7858,7871,7873,8078,8080,8109,8198,andmanymore(200+)WorkaroundsinDNSsoftwareAddedlongagotoimprovecompatibilityNomotivationfornon-compliantplayerstofixThecostsareonthebillofmajorvendors:MaintenanceofuglysourcecodeInefficientoperation:userobserveslaggingDNSHurdlesinimplementingnewDNSfeaturesNon-compliantauthoritativeserversCustomDNSimplementationsOldabandonedversionsBadfirewallsRemoveworkaroundUserswillblametheresolverResolvers'vendorsmustcooperateShiftthefixingcoststonon-compliantpartiesFirstDNSflagdayEDNSisanextensiontoDNSprotocoltoallowi.
a.
>512bytesanswersEveryauthoritativeDNSservermustrespondtoEDNSquery–validEDNSresponse–indicatewithFORMERREDNSisheresince1999RFC1034,1035,1101,1464,1536,1591,1712,1912,1982,1995,1996,2136,2181,2219,2230,2308,2317,2606,2671,2782,2845,2915,3110,3225,3258,3363,3425,3492,3597,3675,4025,4033,4034,4035,4343,4408,4470,4471,4509,4592,4635,4986,5001,5011,5155,5358,5625,5702,5890,5933,5966,6014,6394,6605,6672,6762,6781,6840,6891,7129,7314,7344,7583,7646,7719,7766,7858,7871,7873,8078,8080,8109,8198,andmanymore(200+)FirstDNSflagdayFebruary2019NewreleasesofDNSresolversfromCZ.
NIC,ISC,NLnetLabs,PowerDNSPublicDNSrecursorsGoogle,Quad9,Cloudflare,.
.
.
DNSserverswhichdonotrespondatalltoEDNSqueriesaretreatedasdeadFirstDNSflagdayLotoffear,mediaarticlesManyoperatorsfixedthingsRemainingbrokendomainsaremostlyunusedGoodcooperationamonginternetcommunityCommunicationtooperatorscanimproveTestyourdomainhttps://dnsflagday.
net/2019SecondDNSflagdayPlanninginprogress2020(FebJunOct)DNSUDPtoTCPfallbackmustworkDNSUDPtoTCPfallbackDNSQuery+EDNSbufsize=XYbytesAuthoritativeserverDNSAnswer(sizeunlimited)DNSQuery(again)DNSAnswerTC=1RecursiveresolverUDPUDPTCPTCPDNSUDPtoTCPfallbackRFC1034,1035,1101,1464,1536,1591,1712,1912,1982,1995,1996,2136,2181,2219,2230,2308,2317,2606,2671,2782,2845,2915,3110,3225,3258,3363,3425,3492,3597,3675,4025,4033,4034,4035,4343,4408,4470,4471,4509,4592,4635,4986,5001,5011,5155,5358,5625,5702,5890,5933,5966,6014,6394,6605,6672,6762,6781,6840,6891,7129,7314,7344,7583,7646,7719,7766,7858,7871,7873,8078,8080,8109,8198,andmanymore(200+)DNSoverTCPuse-casesReliabilityforlargeaswers(e.
g.
DNSSEC)AnswersizebiggerthanbufsizeMitigationofDoSAmplification–OutgoingResponseRateLimitingEnsureanswerorigin–DNSSECsecuredelegationbootstrap–CAdomainvalidationSecondDNSflagdayAuthoritativeservermusthonorEDNSbufsizeAuthoritativeservermustanswerwithTC=1AuthoritativeservermustimplementTCPRecursiveresolvershallre-queryoverTCPFirewallmustnotblockTCPport53ThePlanBydefault,resolverswillsetbufsize=~1220ThusnofragmentationforDNSoverUDPWhatyoushalldoUsereasonablyrecentversionofanymainstreamDNSsoftwareimplementaionConfigurefirewallstoallowanykindofcorrectDNStraffic,includingEDNS,TCP,etc.
Watchhttps://dnsflagday.
netfornewsandtests