Readit News logoReadit News
rayhaanj commented on Infomaniak comes out in support of controversial Swiss encryption law   tomsguide.com/computing/v... · Posted by u/BafS
RealStickman_ · 8 months ago
Well fuck, guess I'm moving all my domains again. And I just moved away from Gandi.

Does anyone have recommendations for domain registrars that support .ch and .li domains and ideally also supported by lego (my current acme client of choice)?

rayhaanj · 8 months ago
I'm currently using joker.com after also migrating off of gandi.
rayhaanj commented on DNS piracy blocking orders: Google, Cloudflare, and OpenDNS respond differently   torrentfreak.com/dns-pira... · Posted by u/DanAtC
belorn · 9 months ago
> It is probably quite a bit slower though needing to have roundtrips at each stage of the resolution

The average load time for a website is 2.5 seconds. The added load time from running your own recursive resolver, which is only added the first time the site is loaded, would be around 50ms, or 2% increase load time.

DNS resolving is not a major aspect of a typical websites load time. If you want to speed things up, run a local proxy which local cached version of all popular web frameworks and fonts, and have it be be constantly populated by a script running in the background. That will save you much more than 2% on first load.

rayhaanj · 9 months ago
I just did some measurements and am impressed on both fronts: DNS recursive resolution is faster than I anticipated, but also page load times for well optimised sites are also very fast (sub 0.5s). Here's some data:

Recursively resolve bbc.com: 18ms https://pastebin.com/d94f1Z7P Recursively resolve ethz.ch: 17ms https://pastebin.com/x6jSHgDn Recursively resolve admin.ch: 39ms: https://pastebin.com/DUTg8Rit

Page load in Firefox: bbc.com DOMContentLoaded: ~40ms, page loaded: ~300ms reuters.com DOMContentLoaded: ~200ms, page loaded: ~300ms google.com DOMContentLoaded: ~160ms, page loaded: ~290ms

So it's quite reasonable to do full recursive resolution, and you'll still benefit from caching after the first time it's loaded. One other idea I had but never looked into it was instead of throwing out entries after TTL expiry to just refresh it and keep it cached, no idea if BIND/Unbound can do that but you can probably build something with https://github.com/hickory-dns/hickory-dns to achieve that.

u/rayhaanj

KarmaCake day546September 24, 2018View Original