commit 64842573e9c083658188b61bf67b244ebbc13f96 Author: Jens Harbott Date: Thu Oct 1 16:49:24 2020 +0200 Increase the default TTL in the opendev.org zone to 1h The current default of 5 minutes is rather low, some users report problems with unstable DNS resolution due to it. We don't renumber hosts very often, so a default of 1 hour should be fine. We can still reduce the TTL again for specific hosts once we plan to renumber them. Drop the explicit TTL setting for those records that already were at 1h. We could still consider setting an even higher TTL for hosts that we do want to renumber as seldom as possible, like review.o.o which when renumbered needs firewall updates in a lot of corporate setups. Change-Id: Id96ede520f6c9b915c836afe74b0c4db3db00487 diff --git a/zones/opendev.org/zone.db b/zones/opendev.org/zone.db index c16a1f4..c23c64a 100644 --- a/zones/opendev.org/zone.db +++ b/zones/opendev.org/zone.db @@ -1,8 +1,8 @@ ; -*- mode: zone -*- $ORIGIN opendev.org. -$TTL 5m +$TTL 1h @ IN SOA adns1.opendev.org. hostmaster.opendev.org. ( - 1601410609 ; serial number unixtime + 1601564040 ; serial number unixtime 1h ; refresh (secondary checks for updates) 10m ; retry (secondary retries failed axfr) 10d ; expire (secondary ends serving old data) @@ -272,8 +272,8 @@ mirror-update02 IN SSHFP 4 1 a10804f587b9528e26a3d4614137cf2e9ea9b9df mirror-update02 IN SSHFP 4 2 88789e7fc68388934a460021ae808b29e5dcb467428e2e0d1d3d72f0615691bf mirror-update IN CNAME mirror-update02 -mirror01.dfw.rax 3600 IN A 104.239.150.37 -mirror01.dfw.rax 3600 IN AAAA 2001:4800:7819:105:be76:4eff:fe04:9b8a +mirror01.dfw.rax IN A 104.239.150.37 +mirror01.dfw.rax IN AAAA 2001:4800:7819:105:be76:4eff:fe04:9b8a mirror01.dfw.rax IN SSHFP 1 1 6412f9084baef308978d6656c96ad1e827f8b3da mirror01.dfw.rax IN SSHFP 1 2 2c78a221d09aec4f8b558b3eeecdd1a4fefaf78bc931e069d0144bf0368b7699 mirror01.dfw.rax IN SSHFP 3 1 139f825a9637622e6f2ac4f87c524419df6f98e1 @@ -283,10 +283,10 @@ mirror01.dfw.rax IN SSHFP 4 2 60615e8f41c4d53e3df7cf16c2bab15861b76d7d0604f353 _acme-challenge.mirror01.dfw.rax IN CNAME acme.opendev.org. mirror01.dfw.rax IN CAA 0 issue "letsencrypt.org" mirror01.dfw.rax IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.dfw.rax 3600 IN CNAME mirror01.dfw.rax +mirror.dfw.rax IN CNAME mirror01.dfw.rax _acme-challenge.mirror.dfw.rax IN CNAME acme.opendev.org. -mirror01.bhs1.ovh 3600 IN A 158.69.73.218 +mirror01.bhs1.ovh IN A 158.69.73.218 mirror01.bhs1.ovh IN SSHFP 1 1 98fea2017509e195505b73ec29f654111c66f63b mirror01.bhs1.ovh IN SSHFP 1 2 070cb17cf94f328f44476aaec8c757abb0a62f294e51aaf7f69f21018dc155ae mirror01.bhs1.ovh IN SSHFP 3 1 2cfb033b239fa1df3a2543a610eebddfa2df2f39 @@ -296,10 +296,10 @@ mirror01.bhs1.ovh IN SSHFP 4 2 0f0fe7d3f0338e56d2b716f299332f25abe756217571567 _acme-challenge.mirror01.bhs1.ovh IN CNAME acme.opendev.org. mirror01.bhs1.ovh IN CAA 0 issue "letsencrypt.org" mirror01.bhs1.ovh IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.bhs1.ovh 3600 IN CNAME mirror01.bhs1.ovh +mirror.bhs1.ovh IN CNAME mirror01.bhs1.ovh _acme-challenge.mirror.bhs1.ovh IN CNAME acme.opendev.org. -mirror02.gra1.ovh 3600 IN A 149.202.160.10 +mirror02.gra1.ovh IN A 149.202.160.10 mirror02.gra1.ovh IN SSHFP 1 1 c668c5eaa7deacfdaa0ab9044a1468ba3eaaa46b mirror02.gra1.ovh IN SSHFP 1 2 9ce919b4016f224e7933fd25f1c734ae071ff12a027b1d22a9ad578810b5449f mirror02.gra1.ovh IN SSHFP 3 1 fdacea38ec8022dfada02e7003d421dcb191cad7 @@ -309,7 +309,7 @@ mirror02.gra1.ovh IN SSHFP 4 2 a52396b772f8394d2262538323abadf541aa746bb54265b _acme-challenge.mirror02.gra1.ovh IN CNAME acme.opendev.org. mirror02.gra1.ovh IN CAA 0 issue "letsencrypt.org" mirror02.gra1.ovh IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.gra1.ovh 3600 IN CNAME mirror02.gra1.ovh +mirror.gra1.ovh IN CNAME mirror02.gra1.ovh _acme-challenge.mirror.gra1.ovh IN CNAME acme.opendev.org. mirror01.iad.rax IN A 104.130.4.72 @@ -323,11 +323,11 @@ mirror01.iad.rax IN SSHFP 4 2 d2285cdcc7f85653fde9617d8ae4a52be343b8bbfee48280 _acme-challenge.mirror01.iad.rax IN CNAME acme.opendev.org. mirror01.iad.rax IN CAA 0 issue "letsencrypt.org" mirror01.iad.rax IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.iad.rax 3600 IN CNAME mirror01.iad.rax +mirror.iad.rax IN CNAME mirror01.iad.rax _acme-challenge.mirror.iad.rax IN CNAME acme.opendev.org. -mirror01.ord.rax 3600 IN A 23.253.216.84 -mirror01.ord.rax 3600 IN AAAA 2001:4801:7824:103:be76:4eff:fe10:9c2 +mirror01.ord.rax IN A 23.253.216.84 +mirror01.ord.rax IN AAAA 2001:4801:7824:103:be76:4eff:fe10:9c2 mirror01.ord.rax IN SSHFP 1 1 82dedf4cf3257ec02655a240a20827c2ceb72f16 mirror01.ord.rax IN SSHFP 1 2 b7b97cf4162c16d0c83589ff5f0bbf19f6bb0f3b8224a3aa992b9019bcb3b1ee mirror01.ord.rax IN SSHFP 3 1 bfdbf71c55969396fe4963518e9a1aef0ed75fa3 @@ -337,24 +337,24 @@ mirror01.ord.rax IN SSHFP 4 2 26c81e1160cc3d8c3971654c26ad87da72f86b6b93d8fa1b _acme-challenge.mirror01.ord.rax IN CNAME acme.opendev.org. mirror01.ord.rax IN CAA 0 issue "letsencrypt.org" mirror01.ord.rax IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.ord.rax 3600 IN CNAME mirror01.ord.rax +mirror.ord.rax IN CNAME mirror01.ord.rax _acme-challenge.mirror.ord.rax IN CNAME acme.opendev.org. -mirror02.regionone.linaro-us 3600 IN A 139.178.85.140 -mirror02.regionone.linaro-us 3600 IN AAAA 2604:1380:4111:3e54:f816:3eff:fe17:6b17 +mirror02.regionone.linaro-us IN A 139.178.85.140 +mirror02.regionone.linaro-us IN AAAA 2604:1380:4111:3e54:f816:3eff:fe17:6b17 mirror02.regionone.linaro-us IN SSHFP 1 1 364ff82e8e8371b054df9ac751acce9ebd552ca9 mirror02.regionone.linaro-us IN SSHFP 1 2 c4819445593fc87273b6962a54eba3731555e76a167bcbd07e87784399b96c11 mirror02.regionone.linaro-us IN SSHFP 3 1 d1a189c5bf1eb59fb292da72fabd79fe91cc8e94 mirror02.regionone.linaro-us IN SSHFP 3 2 a53fabcb149572598991b6a69fbb5ce6d0fc4b3ce75351e0f91a76729a9d9aa5 mirror02.regionone.linaro-us IN SSHFP 4 1 3aaa5fd0309ca30d6fb750b163b93512ed5104af mirror02.regionone.linaro-us IN SSHFP 4 2 e805f287d27e160b8226519853d46bfcb014a05d4620a8687272c7597c043fd4 -mirror.regionone.linaro-us 3600 IN CNAME mirror02.regionone.linaro-us +mirror.regionone.linaro-us IN CNAME mirror02.regionone.linaro-us _acme-challenge.mirror02.regionone.linaro-us IN CNAME acme.opendev.org. mirror02.regionone.linaro-us IN CAA 0 issue "letsencrypt.org" mirror02.regionone.linaro-us IN CAA 0 iodef "mailto:infra-root@openstack.org" _acme-challenge.mirror.regionone.linaro-us IN CNAME acme.opendev.org. -mirror02.mtl01.inap 3600 IN A 198.72.125.6 +mirror02.mtl01.inap IN A 198.72.125.6 mirror02.mtl01.inap IN SSHFP 1 1 d661ec2d093ab9823dfd8c896ee195ac6161dac3 mirror02.mtl01.inap IN SSHFP 1 2 6e4ddff2e1ed051fda87a7cfeb9e00a330f0472da1bd737dc76dc228b161d0b0 mirror02.mtl01.inap IN SSHFP 3 1 b8f876a82e62a452830762f027839747e51bdf48 @@ -364,10 +364,10 @@ mirror02.mtl01.inap IN SSHFP 4 2 b1bab5c113499fd1f43694bf5123190497588f28c2ac0a _acme-challenge.mirror02.mtl01.inap IN CNAME acme.opendev.org. mirror02.mtl01.inap IN CAA 0 issue "letsencrypt.org" mirror02.mtl01.inap IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.mtl01.inap 3600 IN CNAME mirror02.mtl01.inap +mirror.mtl01.inap IN CNAME mirror02.mtl01.inap _acme-challenge.mirror.mtl01.inap IN CNAME acme.opendev.org. -mirror01.kna1.airship-citycloud 3600 IN A 188.212.109.64 +mirror01.kna1.airship-citycloud IN A 188.212.109.64 mirror01.kna1.airship-citycloud IN SSHFP 1 1 613412f380d3954510eca390b22264662b32493c mirror01.kna1.airship-citycloud IN SSHFP 1 2 292f33444f7c8d3dbff131c765facc761fd964feac5795083df857dd02ebf4a0 mirror01.kna1.airship-citycloud IN SSHFP 3 1 9dd5df3f2bf1620dcd944fe0714b2a0c74a7e212 @@ -377,15 +377,15 @@ mirror01.kna1.airship-citycloud IN SSHFP 4 2 fb6c161e1664c579757ea4e1a798741bd1 _acme-challenge.mirror01.kna1.airship-citycloud IN CNAME acme.opendev.org. mirror01.kna1.airship-citycloud IN CAA 0 issue "letsencrypt.org" mirror01.kna1.airship-citycloud IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.kna1.airship-citycloud 3600 IN CNAME mirror01.kna1.airship-citycloud +mirror.kna1.airship-citycloud IN CNAME mirror01.kna1.airship-citycloud _acme-challenge.mirror.kna1.airship-citycloud IN CNAME acme.opendev.org. -mirror01.us-east.openedge 3600 IN A 108.44.198.36 +mirror01.us-east.openedge IN A 108.44.198.36 mirror01.us-east.openedge IN AAAA 2001:470:e126:0:f816:3eff:fecd:ebe6 _acme-challenge.mirror01.us-east.openedge IN CNAME acme.opendev.org. mirror01.us-east.openedge IN CAA 0 issue "letsencrypt.org" mirror01.us-east.openedge IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.us-east.openedge 3600 IN CNAME mirror01.us-east.openedge +mirror.us-east.openedge IN CNAME mirror01.us-east.openedge _acme-challenge.mirror.us-east.openedge IN CNAME acme.opendev.org. mirror01.us-east.openedge IN SSHFP 1 1 6c6606b51d421f0164bc9c604ff46d77ecd2fa40 mirror01.us-east.openedge IN SSHFP 1 2 6a47ad0ab889977244f226bfa9b23a3a80a8dedd2492fc69d0933d4963008943 @@ -394,8 +394,8 @@ mirror01.us-east.openedge IN SSHFP 3 2 9dd858225e425bd5b5863db6ebe1074479439d0e mirror01.us-east.openedge IN SSHFP 4 1 341855ae0a4971407f726a16bcc4da540ce11c2a mirror01.us-east.openedge IN SSHFP 4 2 5c44598b7ffc49d983afcdd4c7a840bd0a3294330146487be7b2ec9d7e029449 -mirror01.sjc1.vexxhost 3600 IN A 38.108.68.25 -mirror01.sjc1.vexxhost 3600 IN AAAA 2604:e100:3:0:f816:3eff:fee3:150 +mirror01.sjc1.vexxhost IN A 38.108.68.25 +mirror01.sjc1.vexxhost IN AAAA 2604:e100:3:0:f816:3eff:fee3:150 mirror01.sjc1.vexxhost IN SSHFP 1 1 9b0a017e8936dd9756d76c644ba3f45d14085264 mirror01.sjc1.vexxhost IN SSHFP 1 2 c9905376b4b972d93de503460321b3ab3119e5a5422c31cf5bdcddde54177c5e mirror01.sjc1.vexxhost IN SSHFP 3 1 3769b380b3b53f5cac6f7164c21d879b03c56592 @@ -405,19 +405,19 @@ mirror01.sjc1.vexxhost IN SSHFP 4 2 a51d1358e99db1e81f6f03a016575e8e3eb2a7ac144 _acme-challenge.mirror01.sjc1.vexxhost IN CNAME acme.opendev.org. mirror01.sjc1.vexxhost IN CAA 0 issue "letsencrypt.org" mirror01.sjc1.vexxhost IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.sjc1.vexxhost 3600 IN CNAME mirror01.sjc1.vexxhost +mirror.sjc1.vexxhost IN CNAME mirror01.sjc1.vexxhost _acme-challenge.mirror.sjc1.vexxhost IN CNAME acme.opendev.org. -mirror01.ca-ymq-1.vexxhost 3600 IN A 199.204.45.149 -mirror01.ca-ymq-1.vexxhost 3600 IN AAAA 2604:e100:1:0:f816:3eff:fe0c:e2c0 +mirror01.ca-ymq-1.vexxhost IN A 199.204.45.149 +mirror01.ca-ymq-1.vexxhost IN AAAA 2604:e100:1:0:f816:3eff:fe0c:e2c0 _acme-challenge.mirror01.ca-ymq-1.vexxhost IN CNAME acme.opendev.org. mirror01.ca-ymq-1.vexxhost IN CAA 0 issue "letsencrypt.org" mirror01.ca-ymq-1.vexxhost IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.ca-ymq-1.vexxhost 3600 IN CNAME mirror01.ca-ymq-1.vexxhost +mirror.ca-ymq-1.vexxhost IN CNAME mirror01.ca-ymq-1.vexxhost _acme-challenge.mirror.ca-ymq-1.vexxhost IN CNAME acme.opendev.org. -mirror01.regionone.limestone 3600 IN A 216.245.200.130 -mirror01.regionone.limestone 3600 IN AAAA 2607:ff68:100:54:f816:3eff:feb5:4635 +mirror01.regionone.limestone IN A 216.245.200.130 +mirror01.regionone.limestone IN AAAA 2607:ff68:100:54:f816:3eff:feb5:4635 mirror01.ca-ymq-1.vexxhost IN SSHFP 1 1 14cf3f0206df8d4b752c55d336080775698ae623 mirror01.ca-ymq-1.vexxhost IN SSHFP 1 2 6d7dabe34a7c344d97c08aaf1503a49ef1cf1480e1210eac4a02f6d4b93580e9 mirror01.ca-ymq-1.vexxhost IN SSHFP 3 1 fcf1c25a3b4b68fceba1a5f7cf7f78abc1af2c23 @@ -427,7 +427,7 @@ mirror01.ca-ymq-1.vexxhost IN SSHFP 4 2 1f77b1377947892754284055a47aa4dac7b07a5 _acme-challenge.mirror01.regionone.limestone IN CNAME acme.opendev.org. mirror01.regionone.limestone IN CAA 0 issue "letsencrypt.org" mirror01.regionone.limestone IN CAA 0 iodef "mailto:infra-root@openstack.org" -mirror.regionone.limestone 3600 IN CNAME mirror01.regionone.limestone +mirror.regionone.limestone IN CNAME mirror01.regionone.limestone _acme-challenge.mirror.regionone.limestone IN CNAME acme.opendev.org. nb01 IN A 104.239.240.55