Re: Status of experimental COPR packages

2019-09-09 Thread Victoria Risk
>> We did recently start setting up another site, Cloudsmith.io, for >> some of our packages. We need a site we can control for non-public >> stuff, like the BIND subscription edition, and private patches, and >> Cloudsmith allows us to put packages for multiple different OSes in >> one repo. I

Re: Status of experimental COPR packages

2019-09-09 Thread John Thurston
On 9/6/2019 12:10 PM, Victoria Risk wrote: I really like what I'm seeing with the COPR distribution: https://copr.fedorainfracloud.org/coprs/isc/ The description there still states "..USE AT YOUR OWN RISK.” John- Do you still see those messages? I don’t see them. I thought I removed all

Re: DNSSEC inline/auto - burst of resigning/updates ?

2019-09-09 Thread Tony Finch
Shumon Huque wrote: > > In recent versions of BIND, the jitter is no longer 1 hour, but spread > out over the signature validity period. Oh, nice, I must have looked at a stale branch by accident :-) Tony. -- f.anthony.n.finchhttp://dotat.at/ Lundy, Fastnet, Irish Sea: North or northwest 6

Re: DNSSEC inline/auto - burst of resigning/updates ?

2019-09-09 Thread Shumon Huque
On Mon, Sep 9, 2019 at 6:48 AM Tony Finch wrote: > [...] > You should find that re-signing gets spread out over time due to update > activity and because of the randomizing jitter that Mark mentioned. So on > a more mature zone you might not get such an intense flurry of signature > updates. The

Re: DNSSEC inline/auto - burst of resigning/updates ?

2019-09-09 Thread Tony Finch
Brandon Applegate wrote: > > Tonight though in about an hour, the serial number was incremented 12 > times and NOTIFYs sent. My home firewall is stable, and my DKIM > rotation happens monthly via cron. So there’s nothing in the logs > regarding a DDNS update. > > My question is - what could