{"id":52324,"date":"2019-11-06T00:00:00","date_gmt":"2019-11-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns"},"modified":"2021-01-02T13:04:14","modified_gmt":"2021-01-02T11:04:14","slug":"hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns","title":{"rendered":"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Madala latentsusega DNS on kiire veebit\u00f6\u00f6tluse jaoks oluline tegur. Selle minimeerimiseks on oluline hoolikalt valida DNS-serverid ja <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/DNSCrypt\/dnscrypt-resolvers\/blob\/master\/v2\/relays.md\">anon\u00fc\u00fcmsed releed<\/a><\/noindex>. Kuid k\u00f5igepealt tuleks vabaneda tarbetutest p\u00e4ringutest.<\/p>\n<p>Just sel p\u00f5hjusel loodi DNS algselt tugevalt vahem\u00e4lutatavaks protokolliks. Domeenide administraatorid seadistavad eraldi kirgede eluea (TTL), ning resolverid kasutavad seda teavet, et v\u00e4ltida tarbetut liiklust, salvestades kirjed m\u00e4llu.<\/p>\n<p>Kas vahem\u00e4lu on efektiivne? M\u00f5ni aasta tagasi n\u00e4itas minu v\u00e4ike uuring, et see ei ole ideaalne. Vaatame praegust olukorda.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTeabe kogumiseks olen ma parandanud <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jedisct1\/encrypted-dns-server\">Salastatud DNS-server<\/a><\/noindex> TTL v\u00e4\u00e4rtuse salvestamiseks vastuse jaoks. See m\u00e4\u00e4ratakse kui iga sissetuleva p\u00e4ringu maksimaalne TTL. See annab hea \u00fclevaate t\u00f5elise liikluse TTL jaotusest ning arvestab ka individuaalsete p\u00e4ringute populaarsust. Parandatud server t\u00f6\u00f6tas mitu tundi.<\/p>\n<p>\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043d\u0430\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 1&nbsp;583&nbsp;579 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 (name, qtype, TTL, timestamp). \u0412\u043e\u0442 \u043e\u0431\u0449\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 TTL (\u043e\u0441\u044c X \u2014 \u044d\u0442\u043e TTL \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0430\u0445):<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/ce19a1ceb07e1fd2f3b2284f86271eac.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>\u0415\u0441\u043b\u0438 \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0431\u0443\u0433\u0440\u0430 \u043d\u0430 86&nbsp;400 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c, \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0435\u0439 SOA), \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e TTL \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043d\u0438\u0437\u043a\u043e\u043c \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435. \u041f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0431\u043b\u0438\u0436\u0435:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/abbe48952b616e1c5bdb18c2dc103dc7.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Noh, TTL \u00fcle 1 tunni pole statistiliselt olulised. Keskendume seega vahemikule 0\u22123600:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/f8a88267e1868a55d9234f66ad8c5dee.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Enamik TTL-e on vahemikus 0 kuni 15 minutit:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/aab650c806097513a5924e5262211ea5.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Suurem osa on 0 kuni 5 minuti jooksul:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/736af4b33b745fb0d5070200fa511426.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>See pole sugugi hea.<\/p>\n<p>Kumulatiivne jaotus teeb probleemi veelgi selgemaks:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/a3a4f03188dd6dbbf4558076b827f6a5.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>\u0412 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 DNS-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 TTL \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 1 \u043c\u0438\u043d\u0443\u0442\u0443 \u0438\u043b\u0438 \u043c\u0435\u043d\u044c\u0448\u0435, \u0430 \u0443 \u0442\u0440\u0451\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0435\u0439&nbsp;\u2014 5 \u043c\u0438\u043d\u0443\u0442 \u0438\u043b\u0438 \u043c\u0435\u043d\u044c\u0448\u0435.<\/p>\n<p>Aga oota, tegelikult on asi veel hullem. L\u00f5ppude l\u00f5puks on need TTL autoriteetsed serverid. Siiski saavad kliendiresolverid (n\u00e4iteks ruuterid, kohalikud vahem\u00e4lud) TTL k\u00f5rgematelt resolveridelt, ja see v\u00e4heneb iga sekundi jooksul.<\/p>\n<p>Seega v\u00f5ib klient tegelikult kasutada iga kirjet keskmiselt pool algsest TTL-ist, p\u00e4rast mida saadab ta uue p\u00e4ringu.<\/p>\n<p>V\u00f5ib-olla kehtivad need v\u00e4ga madalad TTL-d ainult ebatavaliste p\u00e4ringute kohta, mitte populaarsete veebisaitide ja API-de kohta? Vaadakem seda:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/2680f9669a90f449a593edcc84ca0dc8.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>\u041e\u0441\u044c X&nbsp;\u2014 \u044d\u0442\u043e TTL, \u043e\u0441\u044c Y&nbsp;\u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.<\/p>\n<p>Kahjuks on k\u00f5ige populaarsemad p\u00e4ringud ka k\u00f5ige halvemini vahem\u00e4lustatud.<\/p>\n<p>L\u00e4heneme:<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/c670382b195169779743f43fd7b15827.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Otsus: k\u00f5ik on t\u00f5esti halb. Oli juba varem halb, kuid n\u00fc\u00fcd on veel hullem. DNS-i vahem\u00e4lestamine on praktiliselt kasutu. Kuna \u00fcha v\u00e4hem inimesi kasutab oma teenusepakkuja DNS-i lahendajat (m\u00f5istlikel p\u00f5hjustel), muutub viivituse suurenemine silmatorkavamaks.<\/p>\n<p>DNS-i vahem\u00e4lestamine on kasulik ainult sisu jaoks, mida keegi ei k\u00fclasta.<\/p>\n<p>P\u00f6\u00f6rake t\u00e4helepanu ka sellele, et tarkvara v\u00f5ib <noindex><a rel=\"nofollow\" href=\"https:\/\/00f.net\/2011\/11\/17\/how-long-does-a-dns-ttl-last\/\">t\u00f5lgendada erinevalt<\/a><\/noindex> madalaid TTL-e.<\/p>\n<h1>Miks nii?<\/h1>\n<p>Miks on DNS-kirjetele seatud nii madal TTL?<\/p>\n<ul>\n<li>Vanad koormuse tasakaalustajad j\u00e4id vaikeseadetega.<\/li>\n<li>\u0425\u043e\u0434\u044f\u0442 \u043c\u0438\u0444\u044b, \u0447\u0442\u043e \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e DNS \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 TTL (\u044d\u0442\u043e \u043d\u0435 \u0442\u0430\u043a&nbsp;\u2014 \u0441\u043e \u0432\u0440\u0435\u043c\u0451\u043d Netscape Navigator \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 RR \u0438 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e \u043f\u0440\u043e\u0431\u0443\u044e\u0442 \u0434\u0440\u0443\u0433\u043e\u0439, \u0435\u0441\u043b\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f)<\/li>\n<li>Sysadminid soovivad muudatusi koheselt rakendada, sest nii on lihtsam planeerida.<\/li>\n<li>DNS-serveri v\u00f5i koormuse tasakaalustaja administraatori \u00fclesanne on efektiivselt t\u00e4ita kasutajate n\u00f5udmisi seoses konfiguratsiooniga, mitte kiirendada veebisaitide ja teenuste t\u00f6\u00f6d.<\/li>\n<li>Madala TTL (eluea) v\u00e4\u00e4rtuse kasutamine toob rahu ja kindlustunde.<\/li>\n<li>Inimesed seavad alguses madalad TTL-id testimiseks ja unustavad hiljem neid muuta.<\/li>\n<\/ul>\n<p>Ma ei lisanud \u201ekatkestuste t\u00f6\u00f6tlemist\u201d loetellu, kuna see on \u00fcha v\u00e4hem aktuaalne. Kui on vaja suunata kasutajad teise v\u00f5rku lihtsalt veateate lehe kuvamiseks, kui k\u00f5ik muu on rikki l\u00e4inud, siis on t\u00f5en\u00e4oliselt lubatav viivitus, mis \u00fcletab 1 minuti.<\/p>\n<p>K dar\u00fcber jjutis idol alh va yedol, et kui autoriteetsed DNS-serverid on blokeeritud enam kui 1 minutiks, ei p\u00e4\u00e4se keegi enam juurde s\u00f5ltuvatele teenustele. Ja \u00fcleliigsus ei aita, kui p\u00f5hjus on konfiguratsiooni viga v\u00f5i r\u00fcnnak. Teisest k\u00fcljest, m\u00f5istlike TTL-idega j\u00e4tkab paljude kliendid eelmise konfiguratsiooni kasutamist ega m\u00e4rkagi midagi.<\/p>\n<p>Madala TTL definitsioon on suuresti seotud CDN-teenuste ja koormuse tasakaalustajatega, eriti kui need \u00fchendavad CNAME-d madalate TTL-dega ja kirjed, millel on samuti madalad (kuid iseseisvad) TTL-d:<\/p>\n<pre>$ drill raw.githubusercontent.com\nraw.githubusercontent.com.\t9\tIN\tCNAME\tgithub.map.fastly.net.\ngithub.map.fastly.net.\t20\tIN\tA\t151.101.128.133\ngithub.map.fastly.net.\t20\tIN\tA\t151.101.192.133\ngithub.map.fastly.net.\t20\tIN\tA\t151.101.0.133\ngithub.map.fastly.net.\t20\tIN\tA\t151.101.64.133<\/pre>\n<p>Iga kord, kui CNAME v\u00f5i \u00fckski A-kirjest on aegunud, tuleb saata uus p\u00e4ring. M\u00f5lemal on 30-sekundiline TTL, kuid need ei \u00fchti. Tegelik keskmine TTL on 15 sekundit.<\/p>\n<p>Aga oota! Asi on veel hullem. M\u00f5ned resolverid k\u00e4ituvad sellises olukorras kahte madala TTL-iga kirjadega v\u00e4ga halvasti:<\/p>\n<pre>$ drill raw.githubusercontent.com @4.2.2.2\nraw.githubusercontent.com.\t1\tIN\tCNAME\tgithub.map.fastly.net.\ngithub.map.fastly.net.\t1\tIN\tA\t151.101.16.133<\/pre>\n<p>Resolver Level3 t\u00f6\u00f6tab t\u00f5en\u00e4oliselt BIND-il. Kui j\u00e4tkate selle p\u00e4ringu saatmist, tagastatakse alati TTL, mis on v\u00f5rdne 1. Sisuliselt, <code>raw.githubusercontent.com<\/code> ei cache'ita kunagi.<\/p>\n<p>Siin on veel \u00fcks n\u00e4ide sellisest olukorrast v\u00e4ga populaarsel domeenil:<\/p>\n<pre>$ drill detectportal.firefox.com @1.1.1.1\ndetectportal.firefox.com.\t25\tIN\tCNAME\tdetectportal.prod.mozaws.net.\ndetectportal.prod.mozaws.net.\t26\tIN\tCNAME\tdetectportal.firefox.com-v2.edgesuite.net.\ndetectportal.firefox.com-v2.edgesuite.net.\t10668\tIN\tCNAME\ta1089.dscd.akamai.net.\na1089.dscd.akamai.net.\t10\tIN\tA\t104.123.50.106\na1089.dscd.akamai.net.\t10\tIN\tA\t104.123.50.88<\/pre>\n<p>V\u00e4hemalt kolm CNAME kirjet. \u00dcks neist on head TTL, kuid see on t\u00e4iesti kasutu. \u00dclej\u00e4\u00e4nud CNAME algne TTL on 60 sekundit, kuid domeenide puhul <code>akamai.net<\/code> maksimaalne TTL on 20 sekundit, ja \u00fckski neist ei ole faasis.<\/p>\n<p>Kuidas on nende domeenidega, mis pidevalt k\u00fcsivad Apple'i seadmeid?<\/p>\n<pre>$ drill 1-courier.push.apple.com @4.2.2.2\n1-courier.push.apple.com.\t1253\tIN\tCNAME\t1.courier-push-apple.com.akadns.net.\n1.courier-push-apple.com.akadns.net.\t1\tIN\tCNAME\tgb-courier-4.push-apple.com.akadns.net.\ngb-courier-4.push-apple.com.akadns.net.\t1\tIN\tA\t17.57.146.84\ngb-courier-4.push-apple.com.akadns.net.\t1\tIN\tA\t17.57.146.85<\/pre>\n<p>Sama probleem nagu Firefoxil, ja TTL j\u00e4\u00e4b suurema osa ajast 1 sekundi peale kasutades Level3 resolverit.<\/p>\n<p>Dropbox?<\/p>\n<pre>$ drill client.dropbox.com @8.8.8.8\nclient.dropbox.com.\t7\tIN\tCNAME\tclient.dropbox-dns.com.\nclient.dropbox-dns.com.\t59\tIN\tA\t162.125.67.3\n\n$ drill client.dropbox.com @4.2.2.2\nclient.dropbox.com.\t1\tIN\tCNAME\tclient.dropbox-dns.com.\nclient.dropbox-dns.com.\t1\tIN\tA\t162.125.64.3<\/pre>\n<p>Kande <code>safebrowsing.googleapis.com<\/code> TTL v\u00e4\u00e4rtus on 60 sekundit, nagu Facebooki domeenide puhul. Ja taas, kliendi seisukohalt, need v\u00e4\u00e4rtused v\u00e4henevad poole v\u00f5rra.<\/p>\n<h1>Kuidas oleks minimaalne TTL seadistamine?<\/h1>\n<p>Kasutades nime, p\u00e4ringu t\u00fc\u00fcpi, TTL-i ja algselt salvestatud ajatemplit, kirjutasin skripti, et simuleerida 1,5 miljoni p\u00e4ringu l\u00e4bitulekut l\u00e4bi vahem\u00e4llu salvestava resolvri, et hinnata liialdavate p\u00e4ringute mahtu, mis saadetakse aegunud vahem\u00e4lu kande t\u00f5ttu.<\/p>\n<p>47,4% p\u00e4ringutest tehti p\u00e4rast olemasoleva kande aegumist. See on p\u00f5hjendamatu k\u00f5rge.<\/p>\n<p>Milline m\u00f5ju on vahem\u00e4llu salvestamisele, kui kehtestada minimaalne TTL?<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/3abd417d312450519b45f66865b23763.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>X-telg n\u00e4itab minimaalsete TTL v\u00e4\u00e4rtuste arvu. Kanded, mille algne TTL on sellest v\u00e4\u00e4rtusest k\u00f5rgem, ei ole m\u00f5jutatud.<\/p>\n<p>Y-telg n\u00e4itab protsenti klientidest, kellel on juba vahem\u00e4llus salvestatud kandi aegumine ja kes teevad uue p\u00e4ringu.<\/p>\n<p>\u201eLiialdavate\u201d p\u00e4ringute osakaal langeb 47% -lt 36%-le, kui kehtestada minimaalne TTL 5 minutiks. Minimaalne TTL 15 minutiks v\u00e4hendab nende p\u00e4ringute arvu 29%-le. 1 tunni minimaalne TTL v\u00e4hendab nende arvu 17%-le. Oluline erinevus!<\/p>\n<p>Kuidas oleks, kui mitte midagi serveri poolel muuta, vaid hoopis seada minimaalne TTL kliendi DNS-vahem\u00e4ludes (ruuteri, kohalike resolv rugged)?<\/p>\n<p><img decoding=\"async\" alt=\"L\u00f5petage naeruv\u00e4\u00e4rselt v\u00e4ikese TTL-i kasutamine DNS-i jaoks\" src=\"\/wp-content\/uploads\/2019\/11\/107a2bd53797d421d65ac7260bf78dfe.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>N\u00f5utavate p\u00e4ringute arv v\u00e4heneb 47%-lt 34%-le, kui seate minimaalne TTL 5 minutiks, 25%-le, kui minimaalne on 15 minutit, ja 13%-le, kui minimaalne on 1 tund. Optimaalne v\u00e4\u00e4rtus v\u00f5iks olla 40 minutit.<\/p>\n<p>Selle minimaalsete muutuste m\u00f5ju on tohutu.<\/p>\n<h1>Millised on tagaj\u00e4rjed?<\/h1>\n<p>Muidugi saab teenuse \u00fcle viia uuele pilvepakkujale, uuele serverile, uuele v\u00f5rgule, n\u00f5udes klientidelt uute DNS-kirjete kasutamist. Ja piisavalt madal TTL aitab sujuvalt ja m\u00e4rkamatult seda \u00fcleminekut teostada. Kuid kui kolida uuele infrastruktuurile, ei oota keegi, et kliendid \u00fclemineksid uutele DNS-kirjetele 1 minuti, 5 minuti v\u00f5i 15 minuti jooksul. Minimaalse eluaja seadmine 40 minutiks 5 minuti asemel ei takista kasutajatel teenusele juurde p\u00e4\u00e4semast.<\/p>\n<p>Siiski v\u00f5imaldab see oluliselt v\u00e4hendada viivitust ja parandada privaatsust ning usaldusv\u00e4\u00e4rsust, v\u00e4ltides mittevajalikke p\u00e4ringuid.<\/p>\n<p>Muidugi \u00fctlevad RFC-d, et TTL-i tuleks j\u00e4rgida rangelt. Kuid reaalsus on see, et DNS-s\u00fcsteem on muutunud liiga ebat\u00f5husaks.<\/p>\n<p>Kui t\u00f6\u00f6tate autoriteetsete DNS-serveritega, palun kontrollige oma TTL-i. Kas teil on t\u00f5eliselt vaja nii naeruv\u00e4\u00e4rselt madalaid v\u00e4\u00e4rtusi?<\/p>\n<p>Muidugi, on t\u00f5siseid p\u00f5hjuseid seada DNS-kirjadele madalad TTL-d. Kuid mitte 75% DNS-i liiklusest, mis praktiliselt ei muutu.<\/p>\n<p>Ja kui mingil p\u00f5hjusel peate t\u00f5eliselt kasutama madalaid TTL-e DNS-is, veenduge, et teie saidil ei oleks vahem\u00e4lu sisse l\u00fclitatud. Samadel p\u00f5hjustel.<\/p>\n<p>Kui teil t\u00f6\u00f6tab kohalik DNS-vahem\u00e4lu, nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/dnscrypt\/dnscrypt-proxy\">dnscrypt-proxy<\/a><\/noindex>, mis v\u00f5imaldab seada minimaalseid TTL-e, kasutage seda funktsiooni. See on t\u00e4iesti okei. Midagi halba ei juhtu. Seadke minimaalne TTL umbes 40 minuti (2400 sekundi) ja 1 tunni vahel. T\u00e4iesti m\u00f5istlik vahemik.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/474450\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0438\u0437\u043a\u0430\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430 DNS \u2014 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u0427\u0442\u043e\u0431\u044b \u0435\u0451 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u0430\u0436\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 \u0440\u0438\u043b\u0435\u0438. \u041d\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 DNS \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u043b\u044c\u043d\u043e \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0437\u043e\u043d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 (TTL) \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52324","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0438\u0437\u043a\u0430\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430 DNS \u2014 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u0427\u0442\u043e\u0431\u044b \u0435\u0451 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u0430\u0436\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 \u0440\u0438\u043b\u0435\u0438. \u041d\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 DNS \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u043b\u044c\u043d\u043e \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0437\u043e\u043d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 (TTL) \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u0435\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u0432\u0430\u0442\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u043c\u0430\u043b\u044b\u0439 TTL \u0434\u043b\u044f DNS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0438\u0437\u043a\u0430\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430 DNS \u2014 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u0427\u0442\u043e\u0431\u044b \u0435\u0451 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u0430\u0436\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 \u0440\u0438\u043b\u0435\u0438. \u041d\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 DNS \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u043b\u044c\u043d\u043e \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0437\u043e\u043d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 (TTL) \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u0435\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-05T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-01-02T11:04:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47L\u00f5petage naeruv\u00e4\u00e4rselt madala TTL kasutamine DNS-i jaoks | ProHoster","description":"DNS-i madal latentsus on veebis kiiret toimimist tagav peamine tegur. Selle minimeerimiseks on oluline hoolikalt valida DNS-serverid ja anon\u00fc\u00fcmsed releed. Kuid k\u00f5igepealt tuleks vabaneda kasutuist p\u00e4ringutest. Just seet\u00f5ttu loodi DNS algselt tugevalt vahem\u00e4lustatud protokollina. Domeeni administraatorid seadistavad eraldi kirgede eluea (TTL), mille p\u00f5hjal resolveerijad salvestavad kirjeid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u0432\u0430\u0442\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u043c\u0430\u043b\u044b\u0439 TTL \u0434\u043b\u044f DNS | ProHoster","og:description":"\u041d\u0438\u0437\u043a\u0430\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430 DNS \u2014 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u0427\u0442\u043e\u0431\u044b \u0435\u0451 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0432\u0430\u0436\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 \u0440\u0438\u043b\u0435\u0438. \u041d\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 DNS \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u043b\u044c\u043d\u043e \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0437\u043e\u043d \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 (TTL) \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0437\u0430\u043f\u0438\u0441\u0435\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/hvatit-ispolzovat-smehotvorno-malyj-ttl-dlya-dns","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-05T21:00:00+00:00","article:modified_time":"2021-01-02T11:04:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52324","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:14:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:45:29","updated":"2026-01-24 03:14:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=52324"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52324\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=52324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=52324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=52324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}