[eugeneionesco]

I basically use Cloudflare for dns management, they make it so easy....

[thinkMOAR]

I use a ton of registrars, almost all have equal simple dns management as CF. Which requires a party less to use or leak traffic information to.

[_eht]

What is the turnaround time for DNS to propogate on all of those registrars? Are you forced into waiting for TTL's to expire?

I may be wrong but I think eugeneionesco is referencing instant DNS changes which come as a benefit of using Cloudflare and other large DNS management companies. I've never personally seen a registrar offer anything like that.

[eugeneionesco]

Almost instant DNS change is something that I kinda take for granted. Surprising that's so rare...

[mugsie]

well ... the protocol was designed not do that.

DNS is "just" a globally distributed, eventually consistent, key:value store, with a ton of caching built into it.

Also, while it may look instant to you, it may not be to your customers / users / other internet people.

[JakeTheAndroid]

While DNS caches can sometimes impact DNS updates, we rebuild the entire zone file when a DNS value is updated, and purge the previous cache. Even for customers, this should happen pretty quickly. We maintain a 5 minute TTL on all proxied records internally. So, this happens much faster than most other DNS services.

[mugsie]

Yeah - that's a pretty standard way of doing things, and thats how DNS servers themselves will operate (mostly) when you make an update to a recordset.

Its not your cache that is the issue.

People have miss behaving caches, that do not always respect TTLs, some apps can cache the DNS response (I remember a Java issue where the initial value found was cached for the lifetime of the process!).

[always_good]

It's instant because CloudFlare isn't changing DNS records, just where its pointers point to.

Look at it / try it.

[iancarroll]

Their DNS changes are fast even when the site is not being proxied through CF.

[mugsie]

I have, and I use it.

Thats not DNS, that is global load balancing.

Try using something other than HTTP over that FQDN.

[rasz]

are you one of those people running DNS with TTL measured in tens to hundreds of seconds?

[eugeneionesco]

You don't leak any traffic information if you don't enable the proxy, which I don't.

I like the simple easy to use interface and the fact that all the domains that I manage are there, no need to login to multiple registrars.