Graylog2 / Graylog2/graylog2-server

Add support for negative DNS caching in the DNS Lookup data adaptor

Open
#5,095 1 comment 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Add support negative caching according to the domain's SOA TTL policy for the DNS Lookup data adaptor.

Use Case: When a DNS record is queried from a name server, but the record does not exist, the fact that the record does not exist is only valid for a specific amount of time (defined be the SOA TTL policy). This indicates when the next request for the same record should be attempted to see if it exists again.

Currently, the DNS Lookup adaptor would cache the negative (non-existent) result for as long as the 'Expire after' setting indicates in the adaptor's cache. Once implemented, the SOA TTL would be used instead.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.