Am 01.06.2015 um 21:28 schrieb Andrew Lutomirski:
On Mon, Jun 1, 2015 at 12:25 PM, Ryan S. Brown
<ryansb(a)redhat.com> wrote:
> A local DNS resolver would certainly be a surprise to me. Again, this
> comes back to the expectation that a server isn't hopping networks or
> running somewhere un-trusted where there's a high risk of bad actors.
It's not just bad actors. Sometimes things break or you need to
reconfigure your upstream resolvers. With a local caching resolver,
this Just Works (tm). With the status quo, it requires restarting
everything
WHAT - the opposite is true, glibc don't cache nameserver respones and
*now* if you change something on your central resolvers it gets visible
on any machine in your network
with having a local cache on 1000 nodes *then* it requires restarting
everyting - so exactly the opposite you are saying