Tuning Cerowrt

Cerowrt contains some advanced features that are disabled by default due to in part lack of easy means to enable them.

Using DNS forwarders

DNS servers throughout the globe are often badly implemented, and do not support advanced features
such as IPv6 and DNSSEC. However, most ISPs do provide a local DNS server for use that caches a significant amount of data, thus reducing latencies for DNS lookups by a lot. It is best to leverage that DNS server if possible.

We have supplied an example forwarders.conf file with fixed pointers to comcasts’ DNSSEC enabled servers, however they do not work if you are not on comcast’s network.

So, find out the DNS servers your ISP provides pass DNSSEC data, and if so, enter those servers into
the forwarders.conf file, and enable using it by uncommenting the relevant line in named.conf.

Your DNS lookups will remain secure, and speed up by a lot.

To edit this page, submit a pull request to the Github repository.
RSS feed

Recent News & Articles

Sep 6, 2018 Wiki page
Pete Heist's Thoughts on ECN
Sep 5, 2018 Wiki page
Dave Taht's Stance on ECN
Sep 4, 2018 Wiki page
Jonathan Morton's Take on ECN
Sep 3, 2018 Wiki page
ECN-Sane Project
Aug 24, 2018 Wiki page
ECN-Sane Project

Find us elsewhere

Bufferbloat Mailing Lists
#bufferbloat on Twitter
Google+ group
Archived Bufferbloat pages from the Wayback Machine


Comcast Research Innovation Fund
Nlnet Foundation
Shuttleworth Foundation

Bufferbloat Related Projects

Congestion Control Blog
Lede Project (OpenWrt)
Flent Network Test Suite
The Cake shaper

Network Performance Related Resources

Jim Gettys' Blog - The chairman of the Fjord
Toke's Blog - Karlstad University's work on bloat
Voip Users Conference - Weekly Videoconference mostly about voip
Candelatech - A wifi testing company that "gets it".