On 2010-12-07 23:31, David A. Evans wrote: > > I'm in the mood to prove a point. I have a very poorly written > application that is generating a few hundred queries per second of > completely bogus AAAA records before attempting a lookup of the correct > A records. This is because the application was compiled with a IPv6 > interface enabled on the severs so it assumes that v6 is available. It > is not. The application owner does not see an issue as they get the > handful NXDOMAIN responses back in ~2 ms for each valid response and > don't see any performance hit.
Actually, this is the desired behavior for IPv6 applications. They prefer v6, so they first try to connect over v6 (hence the AAAA request). When they either (1) don't get an IPv6 address or (2) they see that they have no route to that IPv6 address or (3) the v6 connection times out; they fall back to IPv4. Most applications are configurable to "only try" either v4 or v6. In my humble opinion, you should ask for this last option in your software. As for proving your point in that second case, you can add a bogus IPv6 address and push the client into failure mode (3), which will cause a noticeable delay. Niobos _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users