[tor-relays] exit operators: DNS failure rate increased - please check your DNS

[nusenu]

Understandably I got the following question from an operator (off-list): 
> How do we fix this? 

This was my answer:

For fast exits we generally recommend to run a local caching and validating
resolver like unbound, without using forwarding.

Besides being more reliable this also improves latency since many hostnames
will be resolved using cached entries.

Regardless of how you proceed: Please do _not_ use Google's DNS server, they see
already a lot of DNS traffic.

https://nymity.ch/dns-traffic-correlation/


-- 
https://mastodon.social/@nusenu
twitter: @nusenu_

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180322/6621556a/attachment.sig>