Cloudflare 的 1.1.1.1 把 A 放在 CNAME 前面搞爆 glibc 的 DNS resolver

有陣子了,上個月的時候 Cloudflare 的 1.1.1.1 因為在改善記憶體用量,導致 A record 有可能在 CNAME record 前面,結果把 glibc 的 DNS resolver 炸了:「What came first: the CNAME or the A record?」,在 Hacker News 上也有些有趣的討論:「What came first:...

Gea-Suan Lin's BLOG
I fucking love #Resolver by #VerucaSalt. Comes out of the gate strong and doesn't fade, IMO.

On the other hand, we have #Resolver!

Advanced and mature package that offers a somewhat heavier scope. It lacks type safety, and often, missing registrations are only discovered through runtime crashes. 😬

However, it can be wrapped with an abstraction.
https://github.com/hmlongco/Resolver

#Codigo X + Complejidad Computaciónal #RESOLVER - El Enigma 2026
Ctrl-Alt-Speech Spotlight: Building Better CSAM Detection With Resolver’s George Vlasto

Ctrl-Alt-Speech is a weekly podcast about the latest news in online speech, from Mike Masnick and Everything in Moderation’s Ben Whitelaw. Subscribe now on Apple Podcasts, Overcast, Spotify, …

Techdirt

A supply chain attacks where the vector relies on #dns spoofing and #dnnsec is of no use:

https://www.welivesecurity.com/en/eset-research/plushdaemon-compromises-network-devices-for-adversary-in-the-middle-attacks/

I suppose the whole idea of "trusting" some random #resolver (from your ISP or not) was never a good idea.

PlushDaemon compromises network devices for adversary-in-the-middle attacks

ESET researchers have discovered a network implant used by the China-aligned PlushDaemon APT group to perform adversary-in-the-middle attacks.

GitHub - frankovo/dns-benchmark-tool: Fast, comprehensive DNS performance testing with DNSSEC validation, DoH/DoT support, and enterprise features

Fast, comprehensive DNS performance testing with DNSSEC validation, DoH/DoT support, and enterprise features - frankovo/dns-benchmark-tool

GitHub

Google apresenta novo algoritmo quântico que promete resolver problemas complexos milhões de vezes mais rápido

https://gd.eurisko.com.br/2025/11/13/google-apresenta-novo-algoritmo-quantico-que-promete-resolver-problemas-complexos-milhoes-de-vezes-mais-rapido/

Anyone have a tool/recipe/howto on (continuously) measuring #DNS server #performance (my local #resolver)? My local network has weird connection setup delays that I want to look at.

Preferably not something that needs a full #Grafana setup that I don’t have, but if needs must, it’s ok.

This week we will be at #NetworkX in #Paris! We are bringing our brand #new #opensource #secure #wifi #router - #OmniaNG! If you couldn't make it to #LinuxDays last week, here is another chance to see it IRL! You can also visit our #stand to talk to us about other #CZNIC projects like #Bird and #Knot #Resolver - #routing and #dns. See you in Paris!