Hi Network Health Team,

A few large-scale exit relay operators have asked for better visibility into
DNS health across their relays. We've built an exitmap module, dnshealth, to 
address this
and want your input before we start running scans and publishing results.

What It Does

- Generates unique DNS queries per relay (wildcard subdomain → expected IP) to 
avoid caches
- Classifies failures: timeout, NXDOMAIN, wrong IP, SOCKS errors
- Outputs structured JSON with latency and error details

All code is open source: https://github.com/1aeo/exitmap

Initial testing: ~98% success rate across ~3k exits, 50-90 true failures per
scan, 4-8 min runtime.

Before We Proceed

1. Any concerns with us running regular scans and publishing results?
2. Recommendations on scan frequency or methodology?

Happy to adjust our approach based on your guidance.

Attachment: publickey - [email protected] - 0x9288289B.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
network-health mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to