63 Comments
- y0himba, on 10/12/2007, -1/+28And that is one of the reasons to use http://www.opendns.com
- Rickler, on 10/12/2007, -6/+23If we just had bigger tubes.
- AssProphet, on 10/12/2007, -1/+16The OpenDNS ips:
208.67.222.222
208.67.220.220 - davidu, on 10/12/2007, -3/+14AssProphet,
If we aren't loading sites for you, you need to complain to me, and loudly. That's not okay! :-)
My contact info is on our website and I'm on AIM a lot too.
-david - zoom1928, on 10/12/2007, -0/+10xptical, are you trolling or just not that smart? They're not in the same subnet. With the ISP I own, we use sequential numbers so they're easy for customers to remember but internally they're routed to different parts of the country. There's no reason you can't use /32 subnets. If you had done several traceroutes, you'd see those four Level 3 addresses are load balanced through several different routes. Admittedly they are all in Washington which is bad but they're not the same physical network.
- wilf_brim, on 10/12/2007, -1/+11Wow, big news. Another Verizon service that sucks. Just like their cell phone service, land line service, etc. This is a company not know for delivering on promises. I understand that Verizon FIOS is (for the moment) a bit of all right, but that may change as it spreads.
- doxx, on 10/12/2007, -1/+11Yeah, OpenDNS is fast.. I like 'em!
- SniperGX1, on 10/12/2007, -1/+10Most people's only other choice is Comcast, its like choosing between a kick in the nuts and a punch in the nuts
- xptical, on 10/12/2007, -1/+9I think what he's trying to say is that OpenDNS may be caching bad info for some IP/Domain matches. I've actually seen this before on big sites that use a round-robin approach. Your DNS would think CNN.com was on 1.2.3.4. And maybe it was 30 minutes ago. But now, CNN.com is on 1.2.3.5. The server-end of round-robin has improved to make that almost unheard of, but it does still happen with a bad DNS config and a bad destination administrator.
If you really want, why not use your ISP for the primary DNS, OpenNIC for the secondary, and OpenDNS for the third? Yes, under WinXP you can have more than 2 DNS entries. On top of that, run FastCache on your own PC to really make DNS lookups fly. - TNHitokiri, on 10/12/2007, -1/+9"I don't use it because many sites don't show up under it. Granted, I don't understand how it works honestly, but I still know the case when I see it. I have to say though, it is very fast."
Well, domain names are basically just redirections to ip addresses
OpenDNS just handles all the requests that are made for these domain names. You configure the DNS in the router and it would work like:
Firefox -> www.google.com -> request is sent to router for www.google.com -> router uses OpenDNS ip address which will redirect you to google's website. - kob0724, on 10/12/2007, -2/+8Nice title! we need more snappy titles...
- AssProphet, on 10/12/2007, -2/+8@ bennboy371 "I don't use it because many sites don't show up under it."
What sites? I'm curious. FYI to all those not using this yet, one of the nice features of this DNS is that they block lots of phishing sites and offer "did you mean" suggestions when a site's url cannot be resolved and is similar to some other real url. - poipoipoi, on 10/12/2007, -0/+5so is something like OpenDNS *actually* a good thing to use, or are the technogeeks here just harping on the cool-thing-of-the-day again? (you ~know~ how they love to spend hours tweaking stuff even tho the real world benefits are measured in trillionths of a second...)
- klepto, on 10/12/2007, -1/+5"If we aren't loading sites for you, you need to complain to me, and loudly. That's not okay! :-)
My contact info is on our website and I'm on AIM a lot too.
-david"
===========================
I just changed my linksys rv082 router settings to point to your servers, gracias por todo. Significantly faster too. - Mike89, on 10/12/2007, -1/+5lol I like your comment. You sort of make a statement then completely argue yourself down. Then you dont bother writing a conclusion ;)
- xptical, on 10/12/2007, -2/+6Here is a two-part solution to your ISPs ***** services. At least if you are running Windows.
First, download FastCache:
http://www.analogx.com/contents/download/network/fc.htm
This will set up your computer as a caching DNS server. The first time you visit digg.com, it'll go through the process of asking your ISP what the IP address is. The second time yo visit, it'll just use it's own cache of that IP address. Very nice.
If you don't trust your ISPs DNS, you can either go to OpenDNS (linked above) or OpenNIC.
http://www.opennic.unrated.net/public_servers.html
Either of these servers will allow you to reliably do DNS lookups. However, be aware that the latency between my PC and my ISPs DNS is about 5ms. Between me and OpenNIC is about 150ms. Every time you do a lookup, it'll take 30-times longer. But, when coupled with FastCache above, only the first lookup takes longer. - xptical, on 10/12/2007, -2/+5You also have to change the DNS on your network card's settings to 127.0.0.1.
BTW, you can also do this in WinXP natively. Albeit with less control.
Look in the registry here:
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipServiceProvider]
“Class”=dword:00000001
“DNSPriority”=dword:00000001
“HostsPriority”=dword:00000003
“LocalPriority”=dword:00000002
“ProviderPath”=string:%SystemRoot%System32wsock32.dll
“NetbtPriority”=dword:00000004
“Name”=”TCP/IP”
And change around the priorities of LocalPriority and DNSPriority. That way, WinXP will natively ask its own DNS cache (viewable with ipconfig /displaydns, clearable with ipconfig /flushdns) before it ever tries to do a DNS lookup.
This article:
http://vlaurie.com/computers2/Articles/dnscache.htm
Shows some settings to allow you to tune the WinXP DNS cache to get better performance.
Of course, all this depends on the DNSClient service to be running. A lot of tweakers disable this and then wonder why their machine sucks at DNS lookups... - TNHitokiri, on 10/12/2007, -2/+5damn, I suck at writing little bits of information, but it should give you a idea of how it works.
- jasonwc, on 10/12/2007, -1/+3Damn, I just started using OpenDNS after reading this article and the improvement was immediately noticeable. Slashdot and Digg both loaded signifigantly faster. Thanks OpenDNS!
- cybercat, on 10/12/2007, -1/+3I have Verizon internet. Over the last month I've had an unusual amount of dropped DNS requests (usually more then 30 a day). I figured it was just something on my end perhaps my router is giving me some trouble (though it never has in the past), but now after this I'm curious. Another thing of interest that I've noticed is that whenever I download a torrent (legal or otherwise) I almost without fail completely lose DNS for about an hour or more. Of course the internet is quite unusable without DNS. Is Verizon trying to stop people from using up their bandwidth with torrents, and saving Verizon money by 'throttling' traffic this way? I wouldn't be surprised. Even posting this comment I got a DNS time-out with spell check.
- zane411, on 10/12/2007, -2/+4Good to see we have people like you AROUND.
- rkuchiki, on 10/12/2007, -1/+3This is why I like my local ISP, and hope they don't ever sell out to any big companies like Charter or Comcast.
- corrosive, on 10/12/2007, -1/+3Verizon runs their own DNS servers? Since when? When I had them last, 3 years ago, they used Level 3's DNS servers.
4.2.2.1
4.2.2.2
4.2.2.3 - candiru, on 10/12/2007, -3/+5pi.
- bennyboy371, on 10/12/2007, -4/+5I don't use it because many sites don't show up under it. Granted, I don't understand how it works honestly, but I still know the case when I see it. I have to say though, it is very fast.
- jakv5, on 10/12/2007, -2/+3That's better than my DSL provider ( AT&T / SBC). At my house (for the past 4 months) the entire connection dies between around 9pm-2am. I've been on the phone multiple times for hours with support tech's in India (who have trouble understanding my way of thinking) and had a technition come to the house and shrug his sholders.
- davidu, on 10/12/2007, -2/+3I'm bummed they didn't review Speakeasy. Speakeasy is the only ISP I've ever really liked in any recent memory.
- InsaneMachine, on 10/12/2007, -1/+2Too bad they didn't review Charter. Thinking of maybe trying OpenDNS
- mr.hostility, on 10/12/2007, -1/+2Well gee, you could always try it out. I know it's several numbers to type, and that's a lot of work. But with our support I think you can overcome.
- xptical, on 10/12/2007, -6/+7That's so dumb. They are all on the same subnet. One dead router and you'd lose all 3 DNS servers.
- jzp-digg, on 10/12/2007, -0/+1Level3 anycast. Distributed throughout their network.
- zoom1928, on 10/12/2007, -1/+2You can do /32's just fine with every sort of equipment I've seen. You only need /30's on point to point networks or shared networks like Ethernet where you have to have an IP addr for each interface (along with the network and broadcast addrs). You don't need more than one address. You can even do static routes at the command line on Ciscos like this:
ip route a.b.c.d 255.255.255.255 e.f.g.h
The e.f.g.h would be the address of a system that does have a /30 or larger netmask. I did that for years until we started using OSPF in 1999. On each router you had a set of static routes to get to the next hop for each of our three name servers. - jzp-digg, on 10/12/2007, -0/+1There is nothing inherently faster about it. A bunch of distributed resolvers. check your RTT to the hosts near you and that will tell you if it is worth it *for*you*. Only idiots who don't understand that proximity matters will give you the blanket "it is better" response.
- signal15, on 10/12/2007, -2/+2If you are in charge of DNS at an ISP, you need to take a looksee at Infoblox DNS appliances. http://www.infoblox.com
Very cool product, and it has the ability to do DHCP too. It integrates with AD. If you've got a VOIP installation, it will do the tftp for phone software and configs. And if you need NAC, you get it for nothing by downloading the ID Aware toolkit. I've done a few installations of it, and it's a really slick product. - jzp-digg, on 10/12/2007, -1/+1Surprise surprise - openDNS has a blog entry promoting their service.
No digg; old news spun to be advertising. - mrmagoo, on 10/12/2007, -1/+1DNS is not a reliable protocol to begin with. It uses UDP to trasport the packets, which is a fast protocal, not a realiable one. If a request gets dropped, your computer will simply make another request. The delay is only a second or two on a Windows machine, and 3% is pretty good anyway.
- bennyboy371, on 10/12/2007, -2/+2At least up in Oregon, Comcast gave better speeds than I've gotten with Charter down here in Nevada.
- scubacuda, on 10/12/2007, -1/+1Just use these as backups
4.2.2.1
4.2.2.2
4.2.2.3
4.2.2.4
Not sure whose they are, but I've used them for years and they always work. - zoom1928, on 10/12/2007, -1/+1Sorry for yet another reply...
xptical, you're thinking in terms of a network. I understand your misconception now. Instead think in terms of routes. There are plenty of /32 routes used by every major ISP. Very often equipment gets moved to other locations, you're growing and adding IP addrs but don't want to have to change customer configurations, you're running out of IP addresses and need to conserve, or there's a manager that's an IP allocation Nazi. The last big ISP I did some contract work for had around a thousand individual /32 routes in their internal network. It's very common. Even though two addresses in the same class C appear to be in the same location, they could be on opposite ends of the world. Those Level3 addrs even though they appear to be on the same network, they're actually connected to different segments through different routers. - xptical, on 10/12/2007, -2/+2Using a /32 subnet mask only gives you a single IP address per subnetwork. You couldn't have a router and a DNS on that subnet. Only a router or a subnet.
The biggest number mask in normal networking is a /30 mask. That gives you 2 IPs for single router-2-host networks. If they'd used /30s, then the first network address would be 4.2.2.0. 4.2.2.1 would be the router port. 4.2.2.2 would be the only other allowable IP on the network. 4.2.2.3 would be the broadcast address. The next network would start at 4.2.2.4, and so on.
There is a RFC for using /31 subnets for a total of two IP addresses for point-2-point links. However, there is, AFAIK, no standard (or reason) to use a /32 subnet mask. - EtherGnat, on 10/12/2007, -2/+2I gotta stop staying up so late. I just spent two minutes trying to figure out how this is a "sappy" title.
- doxx, on 10/12/2007, -1/+1I'm on comcast and using OpenDNS, there is no way I will switch off of it, really made my browsing faster!
- scott.cooper, on 10/12/2007, -1/+1^^^^ I've used these for a couple of years now w/ Verizon DSL and never had a problem.
- murrolems, on 10/12/2007, -1/+1This thread is on another subnet
- factoryjoe, on 10/12/2007, -3/+3NM.
- candiru, on 10/12/2007, -2/+2Hey zane, I think it's because I'm not too ONE-SIDED.
- Vanburene, on 07/27/2008, -0/+0Verizon's Rapidly Expanding FiOS TV to Carry Big Ten Network
http://www.sourcerelease.com/corp/kw0?r=ymmmm4 - davidu, on 10/12/2007, -2/+2Infoblox caches claim to only hold like 40,000 DNS objects or something.
There are 56,000,000 dot-com domains or something.
You do the math. :-)
-david - greyfade, on 10/12/2007, -1/+1i remember last year that due to some careless construction workers, a bundle of fiber was cut and it took out Comcast's DNS service for almost 18 hours.
i've since run my own instance of BIND. - Dweller99, on 10/12/2007, -1/+1Those are Verizon's DNS servers ;) (or at least the servers they provide to thier customers)
And I have had the same experience with them.. no problems. -
Show 51 - 61 of 61 discussions



What is Digg?
Digg is coming to a city (and computer) near you! Check out all the details on our