From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,MAILING_LIST_MULTI,NICE_REPLY_A,RCVD_IN_MSPIKE_H2 autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 4791 invoked from network); 11 Jan 2023 15:38:23 -0000 Received: from second.openwall.net (193.110.157.125) by inbox.vuxu.org with ESMTPUTF8; 11 Jan 2023 15:38:23 -0000 Received: (qmail 21748 invoked by uid 550); 11 Jan 2023 15:38:19 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: musl@lists.openwall.com Received: (qmail 21704 invoked from network); 11 Jan 2023 15:38:18 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zhasha.com; s=wirbelwind; t=1673451483; bh=ysYKz6ipdGkQXou3ABUGD17MuX52OsTB6FyYDtWbZS0=; h=Date:From:To:Subject:In-Reply-To:References; b=kQoDMbTeJD7sV8sXNqhebrvTceIXoOQV3VzTEMDaYWPCDjc/412WUzVR0qu9oYpYY JHzkkBwqyyI0raMo543Tc+OM6LCY7WZXTaqxOQ2VT6UuXnhNpH6m2F/Jaw3jqMrnQh T49oVFybv0/eA5tsD9PQW4UpBIwyOagx9+ytgTYk= Date: Wed, 11 Jan 2023 16:38:02 +0100 From: Joakim Sindholt To: musl@lists.openwall.com Message-Id: <20230111163802.415537961294f06006481144@zhasha.com> In-Reply-To: <3a82362e2ce04f049042145c986f6da6@huawei.com> References: <3a82362e2ce04f049042145c986f6da6@huawei.com> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; x86_64-redhat-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: [musl] MAXNS should be increased On Wed, 11 Jan 2023 12:33:59 +0000, "zhoujingqiang (A)" wrote: > Thanks for reply, > > It is not advisable to use localhost as a DNS server in embedded devices. It requires a resident process, which consumes many memory and bandwidth. Having made no effort whatsoever to keep a small footprint I have a caching dnsmasq running here that consumes a grand total of 160kB of RAM. Furthermore, by virtue of it being specifically configurable, it uses significantly less bandwidth than always blasting 12 DNS servers concurrently. It feels like you've gotten hung up on the word "server" for no good reason here. > We only provide devices, not servers. Servers are provided by carriers. We cannot write a build-in special servers on resolv.conf. > Our devices need to be sold to carriers around the world. There are many small carriers. They have their own domain names, which are non-conflicting but unique. In this case, increasing the MAXNS limit is the simplest and most efficient way.I think raising MAXNS won't hurt anything. That's almost guaranteed to be the least efficient way possible. > Or is it possible to provide an interface for MAXNS to be dynamically configurable to make it more flexible? > > -----邮件原件----- > 发件人: Rich Felker [mailto:dalias@libc.org] > 发送时间: 2023年1月11日 0:29 > 收件人: zhoujingqiang (A) > 抄送: musl@lists.openwall.com; liudongxu ; Yulu(Brooklyn,RTOS) ; Nixiaoming ; Wangxu ; qiuguorui ; wangyunhe (A) > 主题: Re: [musl] MAXNS should be increased > > On Tue, Jan 10, 2023 at 12:57:34AM +0000, zhoujingqiang (A) wrote: > > Hello, > > > > Currently, MAXNS is set to 3 which limits the number of nameserver. > > It is not enough to meet most people's requirements for private DNS > > servers. In my scenario, my client needs to access the networks of six > > companies. Each company provides active/standby servers to obtain > > private domain names. Three DNS servers are far from enough. > > > > Expect to increase MAXNS to 12 > > > > Glibc has similar open bug[1]. The concern is that changing MAXNS > > would cause an ABI break. Musl does not have this problem since > > __res_state is stub. > > [1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=998211 > > > > I am not subscribed and want to be Cc'd on replies, thanks. > > Multiple nameservers in resolv.conf are not a means to do unioning of conflicting DNS namespaces. They're expected to be purely redundant with non-conflicting (i.e. if one doesn't know about something another does, it has to ignore the query or ServFail, not NxDomain or NODATA > it) records. If you need unioning of distinct spaces using custom rules for resolving conflicts, you need a special nameserver running on localhost or somewhere else you control that performs this logic. > > Rich >