Hacker News Reader

For easy comparability, request handling rates of tools like this are best described in terms of requests per second, not requests per hour. Also the hardware on which the benchmarks were performed needs to be described in detail.

Are you sure tinydns, which has existed for ages without security vulnerabilities, can't trivially handle 27k requests/second on modern hardware?

View on HN

I have not heard about tindydns before but it seems to be a DNS server, not a client.

The tool has mainly been tested on a Hetzner EX41 server. (Ubuntu, Intel® Core™ i7-6700, 32 GB RAM)

Ah, you are correct. There is also dnscache, which is part of the same suite. However, it does not do what you are attempting to do.

Have you tried c-ares? http://c-ares.haxx.se/

Not yet. I have had a quick look at ldns (https://www.nlnetlabs.nl/projects/ldns/) which supports parsing DNS packets from wire. I will probably replace the DNS implementation with either libldns or c-ares.

ldns is synchronous so all your queries will block. libunbound (https://www.unbound.net/documentation/libunbound.html), like c-ares, is an async C resolver library from the authors of ldns.

Ah, that would mean that I would have the libraries handle the resolving. I was currently only thinking about keeping the single socket which is used in order to only use the parsing functions from the libraries.

Reply on news.ycombinator.com