Re: DNS Issue with proofpoint.com

[Mark Andrews <marka () isc org>]

In message <CADE4tYUzZdKDCnDyz7k9Pwbn7oH5_zzs6zqEnteAtifnB=f68A () mail gmail com>, B
randon Galbraith writes:
> On Wed, Apr 16, 2014 at 9:49 AM, William Herrin <bill () herrin us> wrote:
>
> > What would make sense is some sort of attribute on the DNS record
> > which instructed servers not to cache it for so long that mistakes
> > have a lasting impact.
>
> Or a pub/sub method of sending an immediate invalidation request, similar
> to immediate CDN invalidations.
>
> Caching is nice, but mistakes happen.

Which is why you should choose appropriate ttls.

Also for CDN you are talking to 1 company which has administative control
over the caches.

For DNS you have highly distributed caches which are talking to millions of
servers.  There are nowhere near comparible in terms of management.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka () isc org