DNS reverse lookup and PIX performance

[sghezzi]

Hello,

I have found in a CISCO technical tip that here may be problems n performance of FTP and HTTP is the global IP range used by PIX and its outside interface itself is not registered in any DNS reverse record.
This our case: our IP range is not registered.

How can I see if this is causing really performance problem?
I didn't notice any evident problem up to now.

I would like to see if it is worth registering our IP range or if we can keep on going like this.

CISCO technical document doesn't suggest any way to see if the performance are really impacted by this issue.

Any idea?

Silvia

 

[baddos]

It would only be slow at connection time. The host server would do a reverse dns lookup on the connecting IP (your PIX). All communications past this point won't be affected.

As a general good rule, you should have reverse dns on all of your public IP net range. This helps with troubleshooting and verfication.