watcher tests: fewer queries per domain check, longer live attempts (closes #214)

ResolveIPAddresses, which a domain check runs for each nameserver, asked every nameserver of the name's zone for all eight record types and read only A, AAAA and CNAME. It now asks for those three, so a domain check of example.com sends about a third fewer queries. The per-attempt deadline in livednstest goes from 8 to 18 seconds. It was sized for one lookup, while a watcher check sends over a hundred queries in a row and on the CI runner ran past 8 seconds. Three attempts still end under the 60-second cap. A nameserver that answers none of the three queries now counts as not answering even if it would have answered another type; the watcher keeps the previous addresses either way. Model: opus-5-5
2026-10-02 02:07:00 +00:00
parent 82836b41fd
commit 30f8f05fd5
4 changed files with 55 additions and 21 deletions
@@ -19,6 +19,8 @@ trial run of the finished image: https://git.eeqj.de/sneak/dnswatcher/issues/149

 # Completed Steps

+- 2026-10-02: a nameserver's addresses are looked up asking only for A, AAAA and
+  CNAME records, and a live test attempt may take 18s, not 8s (closes #214).
 - 2026-10-02: the resolver tries root servers, and every other server list it
  walks, in a random order each time, not always from the top (closes #138).
 - 2026-10-02: a name listed more than once in `DNSWATCHER_TARGETS`, in any