Top
Best
New

Posted by farrokhi 19 hours ago

Quad9 to exit France(quad9.net)
1197 points | 407 commentspage 4
gumby 18 hours ago|
Why does it matter that it’s a recursive resolver? They mention this a lot but it seems like the decision would just as much apply to a non-recursive resolver.

I didn’t attempt find the ruling; perhaps the lawsuit was written in an odd way.

ButlerianJihad 18 hours ago|
It is difficult to envision a "non-recursive DNS resolver" in public service. Recursion is the usual and customary way that DNS names are resolved by the leaf servers, because they are not authoritative for much of anything.

The most common configuration for non-recursive DNS servers is with forwarders. The DNS server accepts queries and simply forwards all of them upstream to another resolver, which... makes its own recursive queries.

It is simply not feasible to avoid having recursive resolvers in the chain of lookups. That's how things work with DNS.

gumby 18 hours ago||
We used to just leave that responsibility to the querying host’s own resolver. I don’t fetishize the end-to-end principle (though I come close) so I suppose a recursive resolver service could be a sort of optimization (plenty of ppl look up, say, gmail.google.com so why not cache it).

In any case, if all resolvers these days are recursive why mention it?

I know this is far from the most important question on the topic of this thread!

toast0 18 hours ago||
> We used to just leave that responsibility to the querying host’s own resolver.

When? I didn't get online until the 90s, but resolv.conf delegating recursion to some other node was the way of the world back then. And still is. Some people do run a recursive resolver locally, but it's not so common afaik.

> In any case, if all resolvers these days are recursive why mention it?

Quad9 is named as a recursive resolver in contrast to being an authoritative server. Quad9 and the server I run for my domain are both DNS servers, both provide name resolution, but one is recursive and the other isn't. Used to be, you might run one server for both jobs, but that fell out of fashion for good reasons.

SoftTalker 15 hours ago|||
You'd have to go back to the 1980s I think, when systems were still using /etc/hosts and if the host you wanted to talk to wasn't listed there you'd have to use its IP address directly.

IIRC there were some trusted lists of "well known" hosts that were passed around between administrators. DNS was invented because that obviously became impractical quickly as the internet grew.

lokar 17 hours ago|||
Back then most computing was done in office, lab, university settings. Running recursive resolvers for the local network was part of the standard IT setup.
toast0 17 hours ago|||
While I agree it was common, running a centralized recursive resolver for the local network is not the same as "leave that responsibility to the querying host’s own resolver"
lokar 17 hours ago||
Sure, but it goes with a more centralized approach to systems management in general. The attitude was often that all of the computers were one thing.
weddpros 10 hours ago||
The great wall of Orleans... Living abroad, I've been embarrassed by my french passport for a number of years. Our reputation sucks, for a reason.
xbar 8 hours ago||
Sorry Quad9. I love you. I am sad France does not understand you the way I always have.

Stay Swiss, my friend.

modeless 16 hours ago||
Seems unlikely to resolve their legal issues, as the French lawyers will use the same tactic as the German ones, using a VPN to access the services from France to justify continuing their lawsuits. Perhaps they should consider relocating out of Europe.
Jepacor 18 hours ago||
Welp, I've been using quad9 and I'm French, does anyone have an alternative I can switch to?
capitol_ 17 hours ago||
I recommend Norway, they have lovely fjords.
drcongo 17 hours ago||
This comment made my day, beautiful.
driverdan 15 hours ago|||
You keep using it. They're not going to block your IP but response times may drop since they won't have any servers in France.
driverdan 13 hours ago||
Updating my reply, the CTO said they'll likely do GeoIP blocking even though it's not effective.
Vax- 16 hours ago||
DNSCrypt or RethinkDNS (the resolver, not the app, although the app is awesome as well)
gaiagraphia 16 hours ago||
I wonder what pressure Qatar put on France to force this through?

BeIn is owned by the Qatari state, who just so happen to own Paris St Germain.

Their owners Yousef Al-Obaidly and Nasser Al-Khelaifi (for both the network and the club) are outspoken about piracy and 'the damage it causes football and creative industries'.

They've also been in and out of court a fair bit on corruption charges, and seems they've paid their way out of trouble through fines. Seems just last month a new case opened:

https://www.france24.com/en/live-news/20260920-psg-president...

Nation state meddling, dodgy characters, corruption and greed is more of a threat to football than a DNS resolver, tbh.

babhishek21 4 hours ago|
Sam Ellis of SearchParty just did a video on UAE on the same premise: they own ManCity F.C. and have considerable influence over the UK government. The current UK prime minister also happens to be the former mayor of Manchester.

video link: https://youtu.be/fUrNOVjWUVM?si=koBbVj67CxfMhncC (skip ahead to the second half of the video).

shevy-java 57 minutes ago||
That's sad. France sold out to Qatar.

Shame on you, Macron. What a loser guy. Big words but these are just lies. We really need to no longer put our future into the hands of any politician here. Direct democracy is the only way forward past this point. Courts that work for foreign countries need to be removed. Courts must work, first and foremost, for the local people living in a country.

illusive4080 11 hours ago|
Similar misunderstandings have led to Cloudflare blockages during soccer matches in Spain.
More comments...