Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to disable built in DNS cache #177

Closed
NeutralGround opened this issue Jan 8, 2023 · 1 comment
Closed

Unable to disable built in DNS cache #177

NeutralGround opened this issue Jan 8, 2023 · 1 comment

Comments

@NeutralGround
Copy link

Hi,

Is it possible to disable the built in cache? Tried to set 0 or commenting the line out but it will fail to start.

@jedisct1
Copy link
Member

jedisct1 commented Jan 8, 2023

Have a cache is highly recommended, even if you already have one on the resolver.

In addition to help mitigate side-channel attacks, encrypted-dns-server's cache is likely to be more reliable than your resolver's cache, especially when timeouts and temporary network issues arise. It also avoids storms of queries to upstream servers when a popular set of records expires.

And if the resolver is overloaded, slow, down or being restarted for an update, encrypted-dns-server will still be able to server the most frequent queries until the resolver recovers. It will also let it start more progressively, which is important on servers with limited resources.

@jedisct1 jedisct1 closed this as completed Jan 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants