What does the "Use Reverse DNS Checkbox" get me?
Moderator: SourceGear
What does the "Use Reverse DNS Checkbox" get me?
In trying to get better performance from Vault, I was poking around and I've seen mention that turning this off will improve performance (which I totally understand). What I don't know, however, are the drawbacks or ramifications of doing so. (I'm guessing here that Vault uses this to keep track of my two different projects, both under the same username, which has always been a tad confusing but I'm used to it now.)
When this option is enabled, upon login, the Vault Server will attempt a Get Host By Address (look up by TCP/IP Address) on the request.
In some cases, client machine host names are not correctly configured in their DNS to respond to this kind of query. In other cases, the server is in an environment in which its does not have a DNS or the DNS does not know how to handle the lookup.
In either case, failures as these take time to occur, slowing down the login process.
--------
Now let's talk about where this is used in the Vault Server. As I previously mentioned, the reverse lookup is done at login. The Server caches this value to be used within the Vault Server's log file.
In sum, if you want a log file where entries are identified by user / host name, use Reverse DNS lookup. If you want a log file with log entries identified as user / IP Address, you can turn off this option.
HTH
In some cases, client machine host names are not correctly configured in their DNS to respond to this kind of query. In other cases, the server is in an environment in which its does not have a DNS or the DNS does not know how to handle the lookup.
In either case, failures as these take time to occur, slowing down the login process.
--------
Now let's talk about where this is used in the Vault Server. As I previously mentioned, the reverse lookup is done at login. The Server caches this value to be used within the Vault Server's log file.
In sum, if you want a log file where entries are identified by user / host name, use Reverse DNS lookup. If you want a log file with log entries identified as user / IP Address, you can turn off this option.
HTH
Jeff Clausius
SourceGear
SourceGear
Always helpful. Thanks Jeff. Just what I needed to know. I'm turning it off. (I never look at the logs anyway.)jclausius wrote:In sum, if you want a log file where entries are identified by user / host name, use Reverse DNS lookup. If you want a log file with log entries identified as user / IP Address, you can turn off this option.