Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
4 posts

Wannabe Geek


  Reply # 1001861 9-Mar-2014 19:56
Send private message

I have successfully configured OpenDNS with Slingshot.
I use OpenDNS for family safety and have found it to be a good solution because it protects every device attached to my home Network from Laptop to iPhone.

I have found the impact on performance to be negligible.  This is a subjective opinion.    I could run Wireshark to check.
DNS lookup results are cached in Windows for a period of time, which also mitigates the performance impact.

When I first configured OpenDNS, it worked for a few hours, no problem, but then the static IP Addresses that I entered got automatically deleted.
I called Slingshot, but they saud my configuration was unsupported.  I believe that the NetComm router is somehow calling home, downloading its configuration and reapply its defaults.  initially, I though that this was just DHCP, but I also changed the Admin password, and this change also got reset and this definitely is not a behaviour of DHCP.

I therefore upgraded my NB304N router to the latest firmware.  I downloaded and installed: GAN5.CZ56T-B-NC.AU-R1B033.EN_upgrade

I first backed up my configuration using the the Admin GUI at http://192.161.1.1
I did not need the backup in the end.  It was just in case.

After the upgrade, there was a new menu item in the Admin GUI called:  Management -> TR-069 Client
I changed the URL from:  http://acs.callplus.co.nz/  to   some bad URL such as: http://acs.callplus.co.nzq/  
This (I think) prevents the modem/router from calling home and updating my config.  

It is also possible that it was simply the firmware upgrade which solved the problem.

Anyway, my OpenDNS configuration has now stayed in place.  So fingers crossed, I now have a good FREE solution for Family Safety,
which to be honest works much better than the Microsoft Solution which I was using.
The problem with the MS solution is that user can't be Local Admin.  My daughter wants local Admin for installing stuff.
Also the MS solution does not cover iPhones and Linux or any other type of device connected to my router.

719 posts

Ultimate Geek
+1 received by user: 174

Trusted
Full Flavour

  Reply # 1001871 9-Mar-2014 20:12
Send private message

dconnell: I have found the impact on performance to be negligible.


Over half our networks Google traffic is served from our local cache only a few ms away. If a customer uses any other DNS, they'll no longer be served via our cache and the traffic will come from Sydney.

Getting full speed (up to 100Mbps) downloads on local cache transfers is a lot more likely than traffic coming from outside the network.

BDFL - Memuneh
60858 posts

Uber Geek
+1 received by user: 11727

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1001925 9-Mar-2014 22:52
Send private message

dconnell: I have found the impact on performance to be negligible.  This is a subjective opinion.    I could run Wireshark to check.
DNS lookup results are cached in Windows for a period of time, which also mitigates the performance impact.


The problem is not the DNS lookup going overseas. The problem is that much of the content consumed in New Zealand these days come from a mix of local caches (Akamai, Fastly), australian caches (Amazon AWS, Cloudflare) and Google servers hosted by ISP (Google searches, YouTube).

Anytime you use a DNS that is not from your ISP you will lose visibility of the in-house Google servers and will reach for US-based CDNs instead of local ones.

Overall, in New Zealand, using a third party DNS will impact performance at some point.





4 posts

Wannabe Geek


  Reply # 1002360 10-Mar-2014 20:39
Send private message

OK.  Thanks for the correction.  Have you any other suggestions for Family safety?
The OpenDNS service seams such an elegant solution.
It is a shame Slingshot does not provide something equivalent.



BDFL - Memuneh
60858 posts

Uber Geek
+1 received by user: 11727

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1002378 10-Mar-2014 20:52
Send private message

If you are using Windows then you have built-in Family Safety, which you as administrator can control by creating a standard user account and managing it through your control panel:



Other platforms have similar software.




4 posts

Wannabe Geek


  Reply # 1002429 10-Mar-2014 21:36
Send private message

Yup.  I've tried the Microsoft solution.  It has two major drawbacks as described in my first post.
OpenDNS makes so much sense - if only the service was adopted here in NZ by the ISPs.

4 posts

Wannabe Geek


  Reply # 1002449 10-Mar-2014 22:15
Send private message

I had another thought.

There is a big difference between Latency an Bandwidth.
OpenDNS may be using up more of Slingshot's overseas pipe by
accessing US CDN Servers but that doesn't necessarily mean I will experience slower response.
Maybe by voting with our feet we can persuade Slingshot to adopt an OpenDNS type solution.

I am going to continue with OpenDNS for a while and see how it feels.

719 posts

Ultimate Geek
+1 received by user: 174

Trusted
Full Flavour

  Reply # 1002464 10-Mar-2014 22:45
Send private message

dconnell: OpenDNS may be using up more of Slingshot's overseas pipe by accessing US CDN Servers but that doesn't necessarily mean I will experience slower response.


You might not feel the latency but you should definitely notice reduced throughput.

1595 posts

Uber Geek
+1 received by user: 372


  Reply # 1002518 11-Mar-2014 00:08
Send private message

dconnell: OK.  Thanks for the correction.  Have you any other suggestions for Family safety?
The OpenDNS service seams such an elegant solution.
It is a shame Slingshot does not provide something equivalent.


I tried many products and services and found OpenDNS very useful but no good with my ISP because of the issues with local caching by ISPs.

You can get content filtering at other NZ ISPs like Watchdog and Maxnet. Although both cost money they used to provide some significant advantages over OpenDNS. For example, the free OpenDNS service didn't use to filter malware sites.

BDFL - Memuneh
60858 posts

Uber Geek
+1 received by user: 11727

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1002608 11-Mar-2014 09:58
Send private message

If you folks want to discuss Family Protection, DNS as a safety feature, then please open a new thread in the LAN/Routers forum as this is not specifically a Slingshot problem.




325 posts

Ultimate Geek
+1 received by user: 7


  Reply # 1003043 11-Mar-2014 21:58
Send private message

myfullflavour:
dconnell: I have found the impact on performance to be negligible.


Over half our networks Google traffic is served from our local cache only a few ms away. If a customer uses any other DNS, they'll no longer be served via our cache and the traffic will come from Sydney.

Getting full speed (up to 100Mbps) downloads on local cache transfers is a lot more likely than traffic coming from outside the network.

This isn't correct for OpenDNS and Google servers. Youtube and www.google.co.nz still resolve to Slingshot servers when using OpenDNS, thanks to edns-client-subnet.

Interestingly Akamai seems to have worked something out too although I haven't read anything about it lately, for example Akamai-powered sites like downloadmirror.intel.com and dlcdnet.asus.com resolve to Slingshot or NZ servers using OpenDNS, e.g.

nslookup dlcdnet.asus.com
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
Name: a1828.b.akamai.net
Addresses: 119.224.143.18
119.224.143.11
Aliases: dlcdnet.asus.com
dlcdnet.asus.com.edgesuite.net

tracert 119.224.143.18

Tracing route to p18.akamai.callplus.net.nz [119.224.143.18]
over a maximum of 30 hops:
...
4 32 ms 31 ms 33 ms ae-5-10.cpcak3-r1.tranzpeer.net [101.98.3.47]
5 34 ms 29 ms 27 ms ae-4-10.cpcak3-r1.tranzpeer.net [101.98.3.46]
6 * 31 ms 28 ms ad-cpcak3-r1.tranzpeer.net [101.98.3.163]
7 32 ms 30 ms 28 ms p18.akamai.callplus.net.nz [119.224.143.18]

1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Hawaiki Transpacific cable ready-for-service
Posted 20-Jul-2018 11:29


Microsoft Dynamics 365 Business Central launches
Posted 10-Jul-2018 10:40


Spark completes first milestone in voice platform upgrade
Posted 10-Jul-2018 09:36


Microsoft ices heated developers
Posted 6-Jul-2018 20:16


PB Technologies charged for its extended warranties and warned for bait advertising
Posted 3-Jul-2018 15:45


Almost 20,000 people claim credits from Spark
Posted 29-Jun-2018 10:40


Cove sells NZ's first insurance policy via chatbot
Posted 25-Jun-2018 10:04


N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.