Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-15 Thread Barry Scott
> On 15 Feb 2023, at 10:31, Aditya Sharma wrote: > > Hi Kevin, > > When the TTLs expire, those records in the cache become 'stale', and are > normally purged. Your request is to have an option in systemd-resolved to > *not* purge those records, but to continue serving them in case it is unab

Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-15 Thread Kevin P. Fleming
On Wed, Feb 15, 2023, at 05:31, Aditya Sharma wrote: > We were thinking of an approach where we keep on serving the last known good > FQDNs even after the TTL has expired (only when we are unable to communicate > with the resolvers). For that, we need to intercept the DNS calls and > maintain so

Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-15 Thread Aditya Sharma
Hi Kevin, *When the TTLs expire, those records in the cache become 'stale', and are normally purged. Your request is to have an option in systemd-resolved to *not* purge those records, but to continue serving them in case it is unable to communicate with the configured recursive resolver(s).* Sor

Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-14 Thread Kevin P. Fleming
On Tue, Feb 14, 2023, at 04:04, Aditya Sharma wrote: > Hi Kevin, > > *If what you mean is that you want to serve 'stale' records from a cache when > their TTLs have expired and the authoritative servers which provided them are > not reachable, that's something that a number of existing recursive

Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-14 Thread Aditya Sharma
Hi Kevin, *If what you mean is that you want to serve 'stale' records from a cache when their TTLs have expired and the authoritative servers which provided them are not reachable, that's something that a number of existing recursive resolvers are able to do and it could be logical for systemd-re

Re: [systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-13 Thread Kevin P. Fleming
On Mon, Feb 13, 2023, at 05:38, Aditya Sharma wrote: > Hi All, > > We needed help in understanding how systemd-resolved service can be extended > to cache DNS responses to protect against DNS server failures. > We were planning to maintain a cache so that we can override negative > responses fro

[systemd-devel] Extend systemd-resolved service to override DNS response

2023-02-13 Thread Aditya Sharma
Hi All, We needed help in understanding how systemd-resolved service can be extended to cache DNS responses to protect against DNS server failures. We were planning to maintain a cache so that we can override negative responses from the DNS server and replace it with our cached last known good rec