ORCON DNS

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › ORCON DNS

art3011

39 posts

Geek

#64333 13-Jul-2010 14:43

Some sites are not resolved when using orcon dns, but works with google or opendns:

dig site_name (excerpt)

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

Using google dns 8.8.8.8.

dig @8.8.8.8 site_name (excerpt)

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7773
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

I ger SERVFAIL using orcon but with 8.8.8.8, I get NOERROR.

Is there something wrong with orcon dns ? Is orcon DNS reliable ?

I was hoping not to use google or opendns because local dns should be faster.

magu

Professional yak shaver
1599 posts

Uber Geek

Trusted

BitSignal

Lifetime subscriber

#350729 13-Jul-2010 14:58

ISP DNS is almost never reliable. YMMV.

"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

BlakJak

1275 posts

Uber Geek

Trusted

#350796 13-Jul-2010 15:22

magu: ISP DNS is almost never reliable. YMMV.

That's a terrible generalisation to make. ISP DNS is almost always the fastest as it's almost always the closest to you in network terms. Latency between you and your caching resolver can make a huge difference to your network performance.

FWIW i've seen similar issues with a domain I (personally) host and spoke to someone at Orcon about it within the last half hour. It's being looked into.

No signature to see here, move along...

LennonNZ

2459 posts

Uber Geek

ID Verified

Trusted

#350806 13-Jul-2010 15:29

What are the domains are causing you the issue?

Thanks

magu

Professional yak shaver
1599 posts

Uber Geek

Trusted

BitSignal

Lifetime subscriber

#350829 13-Jul-2010 15:41

BlakJak:
magu: ISP DNS is almost never reliable. YMMV.

That's a terrible generalisation to make. ISP DNS is almost always the fastest as it's almost always the closest to you in network terms. Latency between you and your caching resolver can make a huge difference to your network performance.

FWIW i've seen similar issues with a domain I (personally) host and spoke to someone at Orcon about it within the last half hour. It's being looked into.

Terrible, yes. But unfortunately it's the most common cause of problems for end users.

Of course, Orcon is a reputable ISP and is sure to have a good DNS admin.

"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

freitasm

BDFL - Memuneh
79279 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#350860 13-Jul-2010 16:06

The problem of using third party DNS is when the content providers use a CDN and the third party DNS doesn't tell you the correct IP addresses because they don't take geographical distribution in consideration - not even local caches.

magu

Professional yak shaver
1599 posts

Uber Geek

Trusted

BitSignal

Lifetime subscriber

#350880 13-Jul-2010 16:22

freitasm: The problem of using third party DNS is when the content providers use a CDN and the third party DNS doesn't tell you the correct IP addresses because they don't take geographical distribution in consideration - not even local caches.

With that I agree.

"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

art3011

39 posts

Geek

#351004 13-Jul-2010 18:38

Rang Orcon. They said they will investigate, and I should try to get in touch with them in the next couple of days. In the meantime, I'm using OpenDNS. Problem solved with the workaround.

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

BlakJak

1275 posts

Uber Geek

Trusted

#351050 13-Jul-2010 19:47

In my case it appears that a technicality around strict interpretation of an RFC is the culprit - this 'feature' came with bind 9.6x. I assume Orcon updated not too long ago.

Worked around as well. Now hunting for info as to why behavior has only just changed...

No signature to see here, move along...

art3011

39 posts

Geek

#351328 14-Jul-2010 11:45

This morning, the the site can again be resolved by ORCON DNS, so I reconfigured again to use ORCON.

From my experience, OpenDNS is very reliable, but ISP DNS is faster.

So now, ORCON DNS or OpenDNS ? faster or reliable ? That is the question.

Any disadvantages if I do not use ORCON DNS ?

freitasm

BDFL - Memuneh
79279 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#351336 14-Jul-2010 11:57

art3011: Any disadvantages if I do not use ORCON DNS ?

Read my previous reply. It might be a problem if you use large sites such as Facebook or others using CDNs.

BlakJak

1275 posts

Uber Geek

Trusted

#351345 14-Jul-2010 12:20

art3011: This morning, the the site can again be resolved by ORCON DNS, so I reconfigured again to use ORCON.

From my experience, OpenDNS is very reliable, but ISP DNS is faster.

So now, ORCON DNS or OpenDNS ? faster or reliable ? That is the question.

Any disadvantages if I do not use ORCON DNS ?

What site?

Orcon did indeed upgrade their DNS servers a few weeks ago which jibes with when the site I was involved with started having problems.

No signature to see here, move along...

Athlonite

1828 posts

Uber Geek
Inactive user

#351960 15-Jul-2010 16:07

I Have no probs with facebook and I'm using OpenDNS nor any other site that I haven't chosen to have OpenDNS block automatically

freitasm

BDFL - Memuneh
79279 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#351962 15-Jul-2010 16:08

It depends... If you ISP has an Akamai cache for example, the DNS response will point the wrong IP address and you might have problems with responses timeout.

LennonNZ

2459 posts

Uber Geek

ID Verified

Trusted

#351975 15-Jul-2010 16:31

Yes.. microsoft,yahoo,youtube,google,facebook+many other websites are all CDNed in various ways and using other than the ISP's DNS Servers may cause issues/slowness on these and many other websites.