5 comments

  • teddyh3 hours ago
    The myth of DNS “propagation” needs to die. Changed DNS entries do not “propagate”. The old cached DNS entries in DNS resolvers simply expire, in an arbitrary order. DNS resolvers are not linked geographically; there is no “propagation”.<p>If this tool was querying a list of widely-used public (and&#x2F;or private) DNS resolvers, it might be useful. But pretending that DNS entries propagate geographically does not do anyone any favors.
    • MaulingMonkey1 hour ago
      &gt; The myth of DNS “propagation” needs to die.<p>What&#x27;s the actual issue? Are you being frustrated by people laboring under the assumption that DNS records are being sent by carrier pidgeon or something?<p>&gt; There is no geographical connection whatsoever.<p>DNS censorship will presumably be based on geopolitical boundaries, which in turn are bound by geography. And I wouldn&#x27;t be entirely suprised if poor network connections - including those potentially geographically bound (poor weather &#x2F; flooding &#x2F; tornados severing or degrading links or power) had <i>some</i> (minor, infrequent) impact on the rate stale cache entries are evicted in favor of fresh ones.<p>Granted, none of that means a DNS resolver halfway across the globe from the authoritative servers can&#x27;t typically get updated results &lt;200ms (≈light speed), which is safely ignorable &#x2F; won&#x27;t be visible as records propagating from geographic neighbor to geographic neighbor. And granted further, I&#x27;m both too boring to censor, and too smart to be on call for anything that would make me aware of global outage reports - so the map is admittedly useless <i>to me</i> beyond farming that hacker vibe aura.<p>But I imagine there&#x27;s at least one or two dudes out there that&#x27;ll see a red dot in, say, Australia - and that&#x27;ll save them a few minutes, by giving them a shortcut to determining the root cause of some issue <i>reported</i> in Australia by letting them correctly guess&#x2F;blame stale DNS records.
    • toast02 hours ago
      a) different DNS systems get the change out to all the authoritatives different ways. Some of them with much delay. Delays are hopefully minimal on modern systems, but I&#x27;ve worked with bad systems where you change dns in the api and it takes minutes and sometimes hours for the authoritatives to start returning new results; traditional notify&#x2F;axfr based systems often have a queue of several seconds at least.<p>b) as resolver caches expire, new queries will hopefully get new answers (as long as the authoritatives get updated per a), and eventually you get the new results everywhere except for resolvers that do terrible things...<p>When the change is made and it takes time for the results to show up everywhere, I think propagate is a reasonable verb. You could use disperse or diffuse or something else, but you need a verb to let people know it&#x27;s going to take time for your changes to be visible everywhere.<p>I don&#x27;t know that propagate necessary implies the change becomes visible in an orderly way. &#x27;Around the globe&#x27; doesn&#x27;t really either, it&#x27;s just observing from around the globe as resolvers get new data.<p>What verb do you prefer to use to describe how unsychronized caches obtain new values?
      • c221 hour ago
        Percolate?
    • browningstreet13 minutes ago
      Ehh do you remember the defaults back in the day? And how long local vs intermediary vs backbone TTLs could be cached for, even above and beyond the set TTL?<p>The propagation part refers to how long it would take for all those cached requests to expire and when you could tell some random client they should be able to see the new value. Especially when you forgot to lower the TTL ahead of time.<p>It’s a term of art and it’s fine.<p>Oh that reminds me. I made a bunch of DNS changes a while ago and left all the TTLs set to 5 minutes. I should up them.
    • Callicles3 hours ago
      That&#x27;s what the tool is doing - querying a bunch of public resolvers around the world to see the state of what they resolve to. Since end users usually use DNS servers close to their location, this gives an idea, around the world, of who sees what.<p>Agreed, this is a cache that expires and refreshes from the source DNS server. It just looks like a virus that propagates when the cache expires.
      • teddyh3 hours ago
        &gt; <i>It just looks like a virus that propagates when the cache expires.</i><p>No it does not. The changes do not happen geographically. There is no geographical connection whatsoever. Calling the tool “DNSGlobe”, and displaying a map, only further reinforces the myth.
    • perching_aix1 hour ago
      There is no such myth that I&#x27;d be aware of, and I seriously doubt the author behind this would be operating under such a misunderstanding either. Maybe you used to at some point, but then that&#x27;s a separate issue.<p>Propagation is just an incremental spread across a topology. Doesn&#x27;t need to be a physical topology whatsoever.<p>It may seem like this program suggests a physical propagation as far as its elevator pitch goes, but one glance at the readme clears it up pretty quickly that that&#x27;s not actually the case.<p>Changes do propagate, and seeing funny blinking lights on a world map is cool. Doesn&#x27;t mean there&#x27;d be an intent to convey the process as a geographical spread.
  • LouisvilleGeek26 minutes ago
    Not sure of why everyone is negative against this tool?<p>I quite like it. Thanks for sharing!
  • OptionOfT2 hours ago
    Vibe-coded. Sorry.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;514-labs&#x2F;dnsglobe&#x2F;blob&#x2F;c29802162636832e88b56bbb205e6c773c254e5b&#x2F;src&#x2F;dns.rs#L69" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;514-labs&#x2F;dnsglobe&#x2F;blob&#x2F;c29802162636832e88...</a><p>You take the `other`, do a `to_string()` on it, which creates a String representation. Then you pass a reference to that String, and, in the case it doesn&#x27;t contain `time out` or `timeout` or `refused`, the reference gets turned AGAIN into a String (i.e. new allocation), truncated to 48, and then returned.<p>There is no check whether that the character at the 48th byte is a character boundary.<p>Add to that the fact that this is a Rust project with the oldest commit created yesterday and it is using the 2021 edition.<p>Be better.
    • orangeboats2 hours ago
      It&#x27;s gotten to the point that the moment I see &quot;Rust&quot; and &quot;TUI&quot; together, I immediately assume it&#x27;s vibe coded. The combination just seems to be vibe coders&#x27; favorite, for some reason.
      • zx808013 minutes ago
        &gt; The combination just seems to be vibe coders&#x27; favorite, for some reason.<p>It&#x27;s the secret key to HN front page!
    • seamossfet32 minutes ago
      Nothing wrong with vibecoding a toy project.
    • Callicles2 hours ago
      This was 100% vibe-coded with Claude Code and Fable.<p><a href="https:&#x2F;&#x2F;x.com&#x2F;thatsFrScience&#x2F;status&#x2F;2073741209592295866" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;thatsFrScience&#x2F;status&#x2F;2073741209592295866</a><p>Thanks for the feedback, though, and for taking the time to look at the code. I can ship a round of cleanup.
    • rvz1 hour ago
      Quite mixed on this one given that the author <i>has experience</i> with Rust before coding agents and this is just his toy project.<p>There is going to be a time where these vibe coded projects have silent bugs, vulnerabilities or unnecessary performance issues and the AI coding agent just lies to the user that it has none.<p>The AI agent will be the one to introduce new issues in the codebase regardless of &quot;tests&quot;. The new issue is now the non-technical human vibe-coding is none the wiser.<p>We have already seen this in Codex itself. Imagine this propagated in many other code-bases.
  • robohoe3 hours ago
    Aren’t there websites already that check global DNS servers to check TTL expiry of DNS records?
    • teddyh3 hours ago
      There are many; I often use &lt;<a href="https:&#x2F;&#x2F;dnschecker.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;dnschecker.org&#x2F;</a>&gt;
      • Callicles2 hours ago
        Yeah, I used to use <a href="https:&#x2F;&#x2F;www.whatsmydns.net&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.whatsmydns.net&#x2F;</a>. I wanted it in the terminal without ads.
  • krypd0h35 minutes ago
    I like it. Tell the vibe-coder haters to take a hike. Suggestion: It would be helpful if you could sort by COLUMN or group by LOCATION.<p>Keep on vibin&#x27;.
    • Callicles30 minutes ago
      Thanks for the feedback!