On Tue, Nov 01, 2022 at 01:25:09PM -0400, Bill Cole wrote:
> From where I am, it looks like the Dyn server is answering fast. It's
> the Microsoft server resolving the A record that is slow.
The "nameservers" (if one can call these barely able to speak DNS
systems that) for mail.protection.outlook.com are particularly limited
in their DNS support.
- They don't support EDNS(0), so nameservers that haven't cached
this fact will have to ask twice, first with EDNS(0), receiving
a FORMERR response, and only then without.
- They also (not relevant to the observed delay) don't hanle less
common DNS query types correctly, returning NOTIMP, rather than
NODATA or NXDOMAIN as appropriate.
> # dig bcs-hants-sch-uk.mail.protection.outlook.com
>
> ;; Query time: 4359 msec
That's impressively long, if you were querying from the moon (~2s RTT),
this would be about right.
--
Viktor.
