Skip to content

DNS host comparison: BIND vs Knot vs CoreDNS at scale

VPS Hosting by lookuppierre 22 replies 2.9K views
#11
lookuppierre said:
RackNerd VPS is in Amsterdam region

Amsterdam to Lyon is what, 15ms? Your latency baseline matters. Dnsperf with -l 30 or -l 60 is fine for throughput but tells you nothing about how that behaves at 95th percentile when the network hiccups.

I want to see traceroute and mtr output from your test host to your query source. Bad hop will invalidate everything.

#12

I sell white-label DNS on all three of these. BIND for conservative clients who want ISC support contract. Knot for the speed demons who read NLnet Labs blog. CoreDNS for Kubernetes cowboys who think etcd is a database.

The honest answer I give customers: at under 10K zones and under 50K qps sustained, you will not feel the difference. Buy the one your team can debug at 3am.

3 #13
Ricardo77 said:
Under 50K qps sustained, you will not feel the difference

This is perhaps the wisdom I needed. My association has 200 members and perhaps 5 queries per second at peak. I am optimizing the wrong thing. But the learning is still interesting to me.

prix fixe infrastructure: €5/mo
2 #14

Same here. Ran similar shootout last year on Hetzner CPX11. CoreDNS won on raw numbers, BIND won on "I understand the logs." Stuck with BIND. Sometimes boring is a feature.

#15

This.

#16
StuSpock said:
I can push 100k qps if I drop 5% on the floor

Auckland represent. Also packet loss on dnsperf UDP mode is invisible unless you check the final stats line. Everyone looks at the big number, nobody reads the fine print.

#17
lookuppierre said:
200 members and perhaps 5 queries per second

Then run unbound and spend your time on literally anything else. Resolver, not authoritative, I know, but still. The optimization treadmill is real.

#18
Nadia said:
GC pauses in CoreDNS are sub-millisecond

For heap under 100MB, sure. Scale to million-record zones with DNSSEC and tell me again. I've got graphs. The p99 latency spikes correlate with GC cycles at heap thresholds, not with query complexity. This is observable, reproducible, documented in Go runtime issues.

Your "smells like" is not data. My data is data.

436 days. reboot is surrender.
#19
uma said:
My data is data

Your data is from Contabo migrations with 12 incidents. Contabo's network stack is not RackNerd's. Their hypervisor scheduling is not RackNerd's. You're generalizing from one budget provider to all CoreDNS deployments.

Riga has four seasons. I have four monitoring systems. They disagree often.

/dev/null: full of good ideas
#20

I run Knot on two OVH VPS in Gravelines. No benchmark, just works. The zone transfers to secondary are faster than my old BIND setup, that's all I noticed. For 5 qps, who cares about qps.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft