On 30/12/20 9:02 am, NgTech LTD wrote:
I have seen this issue on Windows clients over the past. Windows nslookup shows that the query has timed out after 2 seconds. On Linux and xBSD I have researched this issue and have seen that: the DNS server is doing a recursive lookup and it takes from 7 to 10++ seconds sometimes. When I pre-warn the DNS cache and the results are cached it takes lower then 500 ms for a response to be on the client side and then everything works fine. I understand that Windows DNS client times out.. When using froward proxy with squid or any other it works as expected since the DNS resolution is done on the proxy server. However for this issue I believe that this timeout should be increased instead of moving to DNS over HTTPS.
The DNS timeout in Squid is 30sec for exactly this type of reason. 2 seconds is far too short to *guarantee* a recursive resolver is able to perform all the work and many round-trip lookups that are needed.
Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
