[OPLINTECH] Google Announces Public DNS Service

[Chad Neeper]

Probably the best thing an individual library or system can do 
performance-wise (strictly with regards to DNS!) is to locally cache DNS 
requests at the firewall/proxy/gateway/etc. With the FOSS network 
perimeter firewall that I typically use, DNS caching is integrated and 
automatic. (Check the features of your own existing setup; you might be 
pleasantly surprised!) That way if one workstation on the network has 
previously resolved a domain name, that information is cached and 
available to any other workstation on the network that does the same DNS 
lookup. No additional impact on the pipe to the Internet at all. In the 
grand scheme of things, however, it typically takes just a few small 
packets of data to complete a DNS lookup request. If DNS lookups are 
pushing your Internet access over the edge, then it may be time to 
really sit down and analyze your usage and make some strategic changes.

Off and on I've considered using OpenDNS for a few libraries, but 
ultimately never ended up using it. You generally want to use the DNS 
servers that are closest (in a networking sense). The closest DNS 
servers will generally respond the fastest to requests. The state's DNS 
servers seem to be provisioned well-enough and I've not had any problems 
with them. One of the servers I usually use is just six hops away from 
workstations at one of my libraries. Unless the State of Ohio is hosting 
one of OpenDNS' or Google's DNS servers on the state's network, it can't 
get any closer than that.

Now if you're looking at the filtering features, that's different...

-----------------------
Chad Neeper
Senior Systems Engineer

Level 9 Networks
740-548-8070 (voice)
866-214-6607 (fax)

--   Full LAN/WAN consulting services   --
-- Specialized in libraries and schools --



Eric Maynard wrote:
> Which raises the related question of should Libraries be persuing 
> services like OpenDNS even if they don't filter or have other means to 
> filter?
>
> Is the "extra" layer of malware protection reason enough to consider 
> using OpenDNS?  Is there a performance benefit if nothing else?
>
> I use this on my home LAN and have given this some though in the past 
> for Holmes Co, but have yet to act with any kind of test or trial.
>
> Thoughts?
>
> Eric Maynard
> Head of Information Technology,
> Holmes County District Public Library
> Millersburg, OH  44654
> Email [emaynard at holmeslib.org <mailto:emaynard at holmeslib.org>]
> Phone [330.674.5972 x.224]
> Fax   [330.674.1938]
>
> "Failure is only the opportunity to begin again more intelligently"
>
>
>
>
> On Fri, Dec 4, 2009 at 9:42 AM, JKENZIG <JKENZIG at cuyahogalibrary.org 
> <mailto:JKENZIG at cuyahogalibrary.org>> wrote:
>
>     And an interesting response from OpenDNS
>
>      
>
>     http://blog.opendns.com/2009/12/03/opendns-google-dns/
>
>      
>
>
>     *To:* oplintech at oplin.org <mailto:oplintech at oplin.org>
>     *Subject:* [OPLINTECH] Google Announces Public DNS Service
>
>      
>
>     This is pretty neat.
>
>     http://code.google.com/speed/public-dns/docs/intro.html
>
>     *Jim Kenzig*
>     Network Manager
>     Cuyahoga County Public Library
>
>      
>
>
>     _______________________________________________
>     OPLINTECH mailing list
>     OPLINTECH at oplin.org <mailto:OPLINTECH at oplin.org>
>     http://mail.oplin.org/mailman/listinfo/oplintech
>     Search: http://oplin.org/techsearch
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> OPLINTECH mailing list
> OPLINTECH at oplin.org
> http://mail.oplin.org/mailman/listinfo/oplintech
> Search: http://oplin.org/techsearch
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.oplin.org/pipermail/oplintech/attachments/20091204/4bfdcc39/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3286 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mail.oplin.org/pipermail/oplintech/attachments/20091204/4bfdcc39/smime.bin