up_the_irons, http://portal.arpnetworks.com redirects to https://arpnetworks.com instead of https://portal.arpnetworks.com FYI mercutio, 4.2.2.2 doesn't return nxdomain either. (You mentioned trying them yesterday when mkb_ complained that their ISP no longer returns nxdomain) oh since when? has that always been the case? Don't think it's always been the case, but I first noticed it a few months ago 8.8.4.4 still returns nxdomain at least, so that's something. First google result is from a year ago https://www.reddit.com/r/sysadmin/comments/3hk05x/level_3_now_hijacking_nxdomain/ There's a HackerNews post from Jan 2014 claiming Level3 are hijacking nxdomain https://news.ycombinator.com/item?id=7119765 And that's the first mention I can find of it. i feel like there needs to be better dns benchmarks random sites from alexa top list isn't really a good benchmark for any real world relevance knot dns recursor has a cool shared cache thing. and you can stop/start it and maintain cache persistent cache on a dns recursor is something that used to be lacking; although i think there was one bad example