Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
4 posts

Wannabe Geek


  Reply # 1001861 9-Mar-2014 19:56
Send private message

I have successfully configured OpenDNS with Slingshot.
I use OpenDNS for family safety and have found it to be a good solution because it protects every device attached to my home Network from Laptop to iPhone.

I have found the impact on performance to be negligible.  This is a subjective opinion.    I could run Wireshark to check.
DNS lookup results are cached in Windows for a period of time, which also mitigates the performance impact.

When I first configured OpenDNS, it worked for a few hours, no problem, but then the static IP Addresses that I entered got automatically deleted.
I called Slingshot, but they saud my configuration was unsupported.  I believe that the NetComm router is somehow calling home, downloading its configuration and reapply its defaults.  initially, I though that this was just DHCP, but I also changed the Admin password, and this change also got reset and this definitely is not a behaviour of DHCP.

I therefore upgraded my NB304N router to the latest firmware.  I downloaded and installed: GAN5.CZ56T-B-NC.AU-R1B033.EN_upgrade

I first backed up my configuration using the the Admin GUI at http://192.161.1.1
I did not need the backup in the end.  It was just in case.

After the upgrade, there was a new menu item in the Admin GUI called:  Management -> TR-069 Client
I changed the URL from:  http://acs.callplus.co.nz/  to   some bad URL such as: http://acs.callplus.co.nzq/  
This (I think) prevents the modem/router from calling home and updating my config.  

It is also possible that it was simply the firmware upgrade which solved the problem.

Anyway, my OpenDNS configuration has now stayed in place.  So fingers crossed, I now have a good FREE solution for Family Safety,
which to be honest works much better than the Microsoft Solution which I was using.
The problem with the MS solution is that user can't be Local Admin.  My daughter wants local Admin for installing stuff.
Also the MS solution does not cover iPhones and Linux or any other type of device connected to my router.

707 posts

Ultimate Geek
+1 received by user: 169

Trusted
Full Flavour

  Reply # 1001871 9-Mar-2014 20:12
Send private message

dconnell: I have found the impact on performance to be negligible.


Over half our networks Google traffic is served from our local cache only a few ms away. If a customer uses any other DNS, they'll no longer be served via our cache and the traffic will come from Sydney.

Getting full speed (up to 100Mbps) downloads on local cache transfers is a lot more likely than traffic coming from outside the network.

 
 
 
 


Try Wrike: fast, easy, and efficient project collaboration software
BDFL - Memuneh
60048 posts

Uber Geek
+1 received by user: 11134

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1001925 9-Mar-2014 22:52
Send private message

dconnell: I have found the impact on performance to be negligible.  This is a subjective opinion.    I could run Wireshark to check.
DNS lookup results are cached in Windows for a period of time, which also mitigates the performance impact.


The problem is not the DNS lookup going overseas. The problem is that much of the content consumed in New Zealand these days come from a mix of local caches (Akamai, Fastly), australian caches (Amazon AWS, Cloudflare) and Google servers hosted by ISP (Google searches, YouTube).

Anytime you use a DNS that is not from your ISP you will lose visibility of the in-house Google servers and will reach for US-based CDNs instead of local ones.

Overall, in New Zealand, using a third party DNS will impact performance at some point.





4 posts

Wannabe Geek


  Reply # 1002360 10-Mar-2014 20:39
Send private message

OK.  Thanks for the correction.  Have you any other suggestions for Family safety?
The OpenDNS service seams such an elegant solution.
It is a shame Slingshot does not provide something equivalent.



BDFL - Memuneh
60048 posts

Uber Geek
+1 received by user: 11134

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1002378 10-Mar-2014 20:52
Send private message

If you are using Windows then you have built-in Family Safety, which you as administrator can control by creating a standard user account and managing it through your control panel:



Other platforms have similar software.




4 posts

Wannabe Geek


  Reply # 1002429 10-Mar-2014 21:36
Send private message

Yup.  I've tried the Microsoft solution.  It has two major drawbacks as described in my first post.
OpenDNS makes so much sense - if only the service was adopted here in NZ by the ISPs.

4 posts

Wannabe Geek


  Reply # 1002449 10-Mar-2014 22:15
Send private message

I had another thought.

There is a big difference between Latency an Bandwidth.
OpenDNS may be using up more of Slingshot's overseas pipe by
accessing US CDN Servers but that doesn't necessarily mean I will experience slower response.
Maybe by voting with our feet we can persuade Slingshot to adopt an OpenDNS type solution.

I am going to continue with OpenDNS for a while and see how it feels.

707 posts

Ultimate Geek
+1 received by user: 169

Trusted
Full Flavour

  Reply # 1002464 10-Mar-2014 22:45
Send private message

dconnell: OpenDNS may be using up more of Slingshot's overseas pipe by accessing US CDN Servers but that doesn't necessarily mean I will experience slower response.


You might not feel the latency but you should definitely notice reduced throughput.

1494 posts

Uber Geek
+1 received by user: 330


  Reply # 1002518 11-Mar-2014 00:08
Send private message

dconnell: OK.  Thanks for the correction.  Have you any other suggestions for Family safety?
The OpenDNS service seams such an elegant solution.
It is a shame Slingshot does not provide something equivalent.


I tried many products and services and found OpenDNS very useful but no good with my ISP because of the issues with local caching by ISPs.

You can get content filtering at other NZ ISPs like Watchdog and Maxnet. Although both cost money they used to provide some significant advantages over OpenDNS. For example, the free OpenDNS service didn't use to filter malware sites.

BDFL - Memuneh
60048 posts

Uber Geek
+1 received by user: 11134

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1002608 11-Mar-2014 09:58
Send private message

If you folks want to discuss Family Protection, DNS as a safety feature, then please open a new thread in the LAN/Routers forum as this is not specifically a Slingshot problem.




325 posts

Ultimate Geek
+1 received by user: 7


  Reply # 1003043 11-Mar-2014 21:58
Send private message

myfullflavour:
dconnell: I have found the impact on performance to be negligible.


Over half our networks Google traffic is served from our local cache only a few ms away. If a customer uses any other DNS, they'll no longer be served via our cache and the traffic will come from Sydney.

Getting full speed (up to 100Mbps) downloads on local cache transfers is a lot more likely than traffic coming from outside the network.

This isn't correct for OpenDNS and Google servers. Youtube and www.google.co.nz still resolve to Slingshot servers when using OpenDNS, thanks to edns-client-subnet.

Interestingly Akamai seems to have worked something out too although I haven't read anything about it lately, for example Akamai-powered sites like downloadmirror.intel.com and dlcdnet.asus.com resolve to Slingshot or NZ servers using OpenDNS, e.g.

nslookup dlcdnet.asus.com
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
Name: a1828.b.akamai.net
Addresses: 119.224.143.18
119.224.143.11
Aliases: dlcdnet.asus.com
dlcdnet.asus.com.edgesuite.net

tracert 119.224.143.18

Tracing route to p18.akamai.callplus.net.nz [119.224.143.18]
over a maximum of 30 hops:
...
4 32 ms 31 ms 33 ms ae-5-10.cpcak3-r1.tranzpeer.net [101.98.3.47]
5 34 ms 29 ms 27 ms ae-4-10.cpcak3-r1.tranzpeer.net [101.98.3.46]
6 * 31 ms 28 ms ad-cpcak3-r1.tranzpeer.net [101.98.3.163]
7 32 ms 30 ms 28 ms p18.akamai.callplus.net.nz [119.224.143.18]

1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Opera launches new mobile browser: Opera Touch
Posted 25-Apr-2018 20:45


TCF and Telcos Toughen Up on Scam Callers
Posted 23-Apr-2018 09:39


Amazon launches the International Shopping Experience in the Amazon Shopping App
Posted 19-Apr-2018 08:38


Spark New Zealand and TVNZ to bring coverage of Rugby World Cup 2019
Posted 16-Apr-2018 06:55


How Google can seize Microsoft Office crown
Posted 14-Apr-2018 11:08


How back office transformation drives IRD efficiency
Posted 12-Apr-2018 21:15


iPod laws in a smartphone world: will we ever get copyright right?
Posted 12-Apr-2018 21:13


Lightbox service using big data and analytics to learn more about customers
Posted 9-Apr-2018 12:11


111 mobile caller location extended to iOS
Posted 6-Apr-2018 13:50


Huawei announces the HUAWEI P20 series
Posted 29-Mar-2018 11:41


Symantec Internet Security Threat Report shows increased endpoint technology risks
Posted 26-Mar-2018 18:29


Spark switches on long-range IoT network across New Zealand
Posted 26-Mar-2018 18:22


Stuff Pix enters streaming video market
Posted 21-Mar-2018 09:18


Windows no longer Microsoft’s main focus
Posted 13-Mar-2018 07:47


Why phone makers are obsessed with cameras
Posted 11-Mar-2018 12:25



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.