Jump to content
Not connected, Your IP: 3.145.175.7
uatavpn

how to cache DNS lookups (linux/openvpn/firefox)?

Recommended Posts

unless there is an important security concern, i'd like to cache DNS lookups but i need help to accomplish this

​i'm running linux mint with openvpn (not using the Air client) and firefox and am using the DNS servers provided by the AirVPN nodes

​firefox apparently includes it's own DNS caching mechanism, controlled with ...

network.dnsCacheExpiration [integer, def=60]

network.dnsCacheExpirationGracePeriod [integer, def=60]

​this can be disabled by setting the first one to '0' and then DNS caching is supposed to fall back to the OS

​the question is, what is the best way to cache the DNS lookups from the Air servers to avoid the constant lookups - the browser or the OS (or not at all)? i think i might prefer the OS since there is other software in the mix other than just my browser, but given the situation (Air DNS and openvpn), i don't know how to go about it

Share this post


Link to post

First you need to determine where do you want to run your caching resolver.

The most common options are either the router, or your local caching server.

 

If you choose the second option, you have to choose between BIND, ncsd or dnsmasq.

 

Then each one of them has a configurable file which tells the server what to cache and for which period.

Most router firmwares use dnsmasq. This is a very light and easy to configure daemon.


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.

Share this post


Link to post

​sounds like dnsmasq would be preferred - i'm looking at this guide: https://community.linuxmint.com/tutorial/view/489

​so in /etc/dnsmasq.conf it says to change the listen-address to 127.0.0.1 - however i believe 127.0.1.1 is being used in conjunction with the VPN, so which is the proper address to use?

​my question is the same for /etc/dhcp3/dhclient.conf and prepend domain-name-servers- 127.0.0.1 or 127.0.1.1?

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...