desktop-packages team mailing list archive
-
desktop-packages team
-
Mailing list archive
-
Message #63691
[Bug 903854] Re: Change default dnsmasq flags to not include --strict-order and disable caching
This bug was fixed in the package network-manager -
0.9.2.0+git201112151936.6b31828-0ubuntu2
---------------
network-manager (0.9.2.0+git201112151936.6b31828-0ubuntu2) precise; urgency=low
* debian/control: libnm-glib-vpn1 Breaks/Replaces libnm-glib2, to ease with
upgrades from Lucid. (LP: #900509)
* debian/rules: re-update the daily builds special case, we don't want to
fail daily builds for new added symbols.
* debian/patches/nm-change-dnsmasq-parameters.patch: change dnsmasq's params
when it's started by NM to disable caching and not pass --strict-order.
Thanks to Stéphane Graber for the patch. (LP: #903854)
-- Mathieu Trudel-Lapierre <mathieu-tl@xxxxxxxxxx> Mon, 09 Jan 2012 14:07:45 +0100
** Changed in: network-manager (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/903854
Title:
Change default dnsmasq flags to not include --strict-order and disable
caching
Status in “network-manager” package in Ubuntu:
Fix Released
Bug description:
When using dnsmasq as a backend, Network Manager currently passes
--strict-order.
This is a good way to get a similar behaviour to that of the libc's
resolver where the DNS servers are being queried sequentially with a
2-3s timeout per server. However in the case where the first DNS
server is down, this will delay all the DNS queries on the system.
Instead, I recommend this parameter be dropped which will fallback to
the default dnsmasq mode to send the initial request to all servers
and then continue with the first one that replies. This will increase
the load on the upstream DNS servers quite a bit (though not as much
as using --all-servers) but will ensure a proper fallback when some
servers are down or very slow.
I think this added load is reasonable and shouldn't affect most DNS
servers too much. For cases where it's a concern (heavily loaded
corporate network for example), I'd suggest the user simply turns off
the dnsmasq plugin in /etc/NetworkManager/NetworkManager.conf thereby
reverting to the libc's behaviour of trying servers sequentially with
a 3s timeout.
As discussed in https://blueprints.launchpad.net/ubuntu/+spec/foundations-p-dns-resolving for security reason (possible local cache poisoning), we also want to turn off caching for the LTS and reconsider caching (ideally with per-user caches) for 12.10.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/903854/+subscriptions
References