From 4081c974bb964355f4137ed65e51a1dd5c3610bb Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Sun, 28 Apr 2024 19:15:42 +0300 Subject: [PATCH] unbound/cache.conf: make the min ttl an hour in my quest to break DNS --- etc/unbound/unbound.conf.d/cache.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/etc/unbound/unbound.conf.d/cache.conf b/etc/unbound/unbound.conf.d/cache.conf index c8d368e7..2f472408 100644 --- a/etc/unbound/unbound.conf.d/cache.conf +++ b/etc/unbound/unbound.conf.d/cache.conf @@ -16,7 +16,10 @@ server: # https://blog.apnic.net/2019/11/12/stop-using-ridiculously-low-dns-ttls/ # dares setting the minimum cache to something between 40 minute and 60, # so how about 50 minutes? However it predates RFC 8767. - cache-min-ttl: 3000 + #cache-min-ttl: 3000 + # Why not just make it hour directly, while that is considered as a + # maximum reasonableish value? + cache-min-ttl: 3600 # Update cache for popular items before they expire. ~10 % traffic # increase according to `man unbound.conf` prefetch: yes