Re: Migrating DNS servers, need advice on hardware

2009-09-25 Thread John Wobus

How can observer the query count? Is there a command or table or
something or is it just how many hits the systems gets on port 53
identified from some form of logging software?


BIND logs hit statistics periodically to syslog, and you can use rndc
stats to append statistics immediately to a file.  See the BIND  
manual

for details.



Other means:

The BIND manual tells how to turn on bind's query log, which is  
normally turned off for performance/resource reasons.
On a very lightly loaded DNS server, it can be left on, and on a  
medium-loaded server, it may be practical to

turn it on for a short while to collect some usage data.

On a Solaris system, snoop can help (as can tcpdump on other *nix  
systems), e.g. to get a frame of reference
regarding your load, inspect 1000 packets to port 53, measuring how  
many seconds it takes to collect them.

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-25 Thread Kaya Saman





Other means:

The BIND manual tells how to turn on bind's query log, which is 
normally turned off for performance/resource reasons.
On a very lightly loaded DNS server, it can be left on, and on a 
medium-loaded server, it may be practical to

turn it on for a short while to collect some usage data.

On a Solaris system, snoop can help (as can tcpdump on other *nix 
systems), e.g. to get a frame of reference
regarding your load, inspect 1000 packets to port 53, measuring how 
many seconds it takes to collect them.

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Thanks for the response John!

I'm assuming that a modern multi core system in a SOHO or small business 
environment can have the query log turned on continuously as should be 
more then powerful enough from what many other people have said. Of 
course full enterprise scale is another matter!!


Will try snoop soon as I have already managed to get Bind working using 
OpenSolaris on Sun's Virtual Box in a small-zone configuration. Of 
course just for testing purposes is running on a laptop and only has 
root name servers and very limited records meaning round 5 in forwards 
and reverse zone. But handles the load perfectly as I can actually take 
the laptop off the main primary and secondary DNS in the host OS and 
just use the DNS server in the zone from the guest OS in Vbox.


Now from this little escapade of mine I have learned two things: the 
first being the power of modern hardware and virtualization and the 
second being that one doesn't need to go OTT for a DNS server in a small 
to moderate sized network - only a virtualized system or Solaris zone 
will do the trick or chroot combined with many other services as most 
rack infrastructure today can handle upto 24GB RAM+.


This has been excellent guys - many thanks to all constructive comments 
and help ;-)


Regards,

Kaya
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-20 Thread Alan Clegg
Frank Bulk wrote:
 Perhaps the inverse would be more interesting: what's the lowest-spec
 hardware that could host an OS that would run the latest version of BIND. =)

It's not exactly low-end hardware, but I have BIND 9.4.2 running on my
iPhone.

AlanC
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Kaya Saman

James Pratt wrote:

You should really improve your google skills. If you can't even figure
out where I'm *at* well you probably really should not be in the DNS
business at all.. :)


  

-Original Message-
From: Kaya Saman [mailto:samank...@netscape.net]
Sent: Friday, September 18, 2009 11:44 PM
To: James Pratt
Subject: Re: Migrating DNS servers, need advice on hardware

Hmm... are you a student or admin?? As your email states you from
Norwich university! Is that Norwich in UK or US??

Kaya
  


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
  
Didn't check Google at all as it didn't come to mind, sorry!!! You wound 
me up so much in your personal mail that my mind was pre-occupied with 
wondering what I was doing trying to get into networks and related 
services completely and why I shouldn't just go join the local 
supermarket. Even after studying Elec Eng. at the third top university 
in UK, and burying myself in a Cisco CCNA course for the last year and 
not even going outside due to study - but what's the point if by 
your and other 'experts' views I'm nothing then why do I bother killing 
myself


Ok after checking google I found you on Linkedin which I'm also a member 
of!! http://www.linkedin.com/in/jprattnu


is your page if not mistaken..

Anyway you see how bad you can make one feel just from them asking one 
innocent question! With many more years of experience then myself fine 
my questions may seem trivial and arbitrary but unfortunately there is 
no junior Bind mailing list for people with less experience - we have to 
swim in the deep end with everyone else but yet endure all the remarks 
and abuse which isn't fair!

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Pedro Alvarez Espinoza
You need to consider three components for memory: OS + other services; the
zone files you load + cache you want.



On Fri, Sep 18, 2009 at 6:43 PM, Kaya Saman samank...@netscape.net wrote:

 Hi,

 currently I have 2 Solaris 9 boxes in my home based data center running as
 primary and secondary dns servers; they are Sun Netra T105's with 440MHz
 SPARC prcossors and 320MB of RAM.

 http://www.optiplex-networks.com/lab/lab.html

 Basically as I am going to be moving abroad since I have finished my
 studies now and am about to get a job I will need to replace them in my new
 residence and was just wondering if anyone had any idea of the hardware
 specs I would need.

 As in should I be going for a single socket or dual socket server and how
 much memory would I need also if I should virtualize the systems at all?
 - Basically get one dual socket quad core system then run something like Sun
 xVM or Citrix Xen on it and then have an instance of Primary and Secondary
 or just use Solaris Zones as I will be whacking OpenSolaris most likely onto
 them anyway

 I am quite confident that 1-2GB of memory should be sufficient to handle
 the OS and multiple lookups as I'm planning on tying 3 sites together with
 them plus using them as main servers for my domain also.

 I mean an idea of hardware was to get 1 or 2 Sun Fire X2250s solely for DNS
 then run the Named service in a Small-Zone which I feel is equivalent to
 running them chrooted on a linux system?? Which I used to run bind on
 Debian Etch chrooted before the Netra's came along and I started learning
 Solaris!

 What can anyone recommend???

 Many thanks for any responses :-)

 Kaya




 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

RE: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Frank Bulk
Perhaps the inverse would be more interesting: what's the lowest-spec
hardware that could host an OS that would run the latest version of BIND. =)

Frank

-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
Sent: Saturday, September 19, 2009 12:09 AM
To: comp-protocols-dns-b...@isc.org
Subject: Re: Migrating DNS servers, need advice on hardware

In article mailman.535.1253329254.14796.bind-us...@lists.isc.org,
 Kaya Saman samank...@netscape.net wrote:

 
  Since you haven't mentioned how many zones and records you're hosting, 
  how do you expect anyone to guess how much hardware you need?
 

 Yes thank you for pointing that out! I do apologize as I mentioned I've 
 just finished my studies and am as of yet quite in-experienced yet with 
 certain things so please do not frown upon me for that! - I know many 
 people here are top notch pro's and I do not fall into that category but 
 someone who is eager to get there :-)
 
 Anyhow, I have 4 zone files for 1 domain currently and I'm using 2 
 views; internal and external. I hope to expand too once I have more 
 finances available to me and start mirroring Linux distros and perhaps 
 even OpenSolaris and BSD as well. But for now it's fairly simple stuff!
 
 I have noticed however that with the current setup my secondary DNS is 
 getting used quite a bit too as both systems are doing quite a few 
 translations - luckily I have a Cisco router in place so my WAN 
 connection is stable and does not crash like with a consumer based 
 router..

In private email, he told me he has 59 forward and reverse records in 
the internal view, and 22 of each in the external view.

This is nothing.  A 10-year-old Pentium should be able to handle this 
without breaking a sweat.

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Kaya Saman

Frank Bulk wrote:

Perhaps the inverse would be more interesting: what's the lowest-spec
hardware that could host an OS that would run the latest version of BIND. =)

Frank

  
Silly guess, but a cell phone running linux?? (with static IP could be a 
mobile domain server)



As stated previously I have it running on 440MHz SPARC currently with 
360MB RAM. I guess this could be pushed down to a PI or PII, --- I 
am aware of the differences between the CISC based 64bit SPARC chip and 
the RISC based 32bit Intel ;-) incase any one has any objections...

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Kaya Saman

Kaya Saman wrote:

Frank Bulk wrote:

Perhaps the inverse would be more interesting: what's the lowest-spec
hardware that could host an OS that would run the latest version of 
BIND. =)


Frank

  
Silly guess, but a cell phone running linux?? (with static IP could be 
a mobile domain server)



As stated previously I have it running on 440MHz SPARC currently with 
360MB RAM. I guess this could be pushed down to a PI or PII, --- I 
am aware of the differences between the CISC based 64bit SPARC chip 
and the RISC based 32bit Intel ;-) incase any one has any objections...

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
It's not Bind or perhaps is some sort of hacked out version but 
basically since Cisco IOS comes with it's own DNS server which I have 
dabbled in on my 857W at home, being based round BSD I presume with the 
right OS one could run Bind comfortably on that??


Taken from output of show version: Cisco 857W (MPC8272) processor 
(revision 0x200) with 59392K/6144K bytes of memory.


I'm pretty sure the little 857W would run Bind if someone actually was 
able to build BSD on it or so.. it has 64MB of RAM too so should be 
good enough for at least 5 people. {provided one takes out the systems 
routing capability though as the way I use the router is maxed out lol}



___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Sten Carlsen
A very decent performance can be achieved on a K6 330MHz with 128MB,
also running all sorts of other servers. This HW is from about 1995 and
still sufficient for BIND and more.

Kaya Saman wrote:
 Frank Bulk wrote:
 Perhaps the inverse would be more interesting: what's the lowest-spec
 hardware that could host an OS that would run the latest version of
 BIND. =)

 Frank

   
 Silly guess, but a cell phone running linux?? (with static IP could be
 a mobile domain server)


 As stated previously I have it running on 440MHz SPARC currently with
 360MB RAM. I guess this could be pushed down to a PI or PII, --- I
 am aware of the differences between the CISC based 64bit SPARC chip
 and the RISC based 32bit Intel ;-) incase any one has any objections...
 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

-- 
Best regards

Sten Carlsen

No improvements come from shouting:

   MALE BOVINE MANURE!!! 

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-19 Thread Josh Kuo
Small home linksys router running open WRT can do the job, with 16MB
of RAM and some low powered MIPS CPU.

On Saturday, September 19, 2009, Frank Bulk frnk...@iname.com wrote:
 Perhaps the inverse would be more interesting: what's the lowest-spec
 hardware that could host an OS that would run the latest version of BIND. =)

 Frank

 -Original Message-
 From: bind-users-boun...@lists.isc.org
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
 Sent: Saturday, September 19, 2009 12:09 AM
 To: comp-protocols-dns-b...@isc.org
 Subject: Re: Migrating DNS servers, need advice on hardware

 In article mailman.535.1253329254.14796.bind-us...@lists.isc.org,
  Kaya Saman samank...@netscape.net wrote:

 
  Since you haven't mentioned how many zones and records you're hosting,
  how do you expect anyone to guess how much hardware you need?
 
 
 Yes thank you for pointing that out! I do apologize as I mentioned I've
 just finished my studies and am as of yet quite in-experienced yet with
 certain things so please do not frown upon me for that! - I know many
 people here are top notch pro's and I do not fall into that category but
 someone who is eager to get there :-)

 Anyhow, I have 4 zone files for 1 domain currently and I'm using 2
 views; internal and external. I hope to expand too once I have more
 finances available to me and start mirroring Linux distros and perhaps
 even OpenSolaris and BSD as well. But for now it's fairly simple stuff!

 I have noticed however that with the current setup my secondary DNS is
 getting used quite a bit too as both systems are doing quite a few
 translations - luckily I have a Cisco router in place so my WAN
 connection is stable and does not crash like with a consumer based
 router..

 In private email, he told me he has 59 forward and reverse records in
 the internal view, and 22 of each in the external view.

 This is nothing.  A 10-year-old Pentium should be able to handle this
 without breaking a sweat.

 --
 Barry Margolin, bar...@alum.mit.edu
 Arlington, MA
 *** PLEASE don't copy me on replies, I'll read them in the group ***
 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Migrating DNS servers, need advice on hardware

2009-09-18 Thread Barry Margolin
In article mailman.533.1253324630.14796.bind-us...@lists.isc.org,
 Kaya Saman samank...@netscape.net wrote:

 Hi,
 
 currently I have 2 Solaris 9 boxes in my home based data center running 
 as primary and secondary dns servers; they are Sun Netra T105's with 
 440MHz SPARC prcossors and 320MB of RAM.
 
 http://www.optiplex-networks.com/lab/lab.html
 
 Basically as I am going to be moving abroad since I have finished my 
 studies now and am about to get a job I will need to replace them in my 
 new residence and was just wondering if anyone had any idea of the 
 hardware specs I would need.

Since you haven't mentioned how many zones and records you're hosting, 
how do you expect anyone to guess how much hardware you need?

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-18 Thread Kaya Saman




Since you haven't mentioned how many zones and records you're hosting, 
how do you expect anyone to guess how much hardware you need?


  
Yes thank you for pointing that out! I do apologize as I mentioned I've 
just finished my studies and am as of yet quite in-experienced yet with 
certain things so please do not frown upon me for that! - I know many 
people here are top notch pro's and I do not fall into that category but 
someone who is eager to get there :-)


Anyhow, I have 4 zone files for 1 domain currently and I'm using 2 
views; internal and external. I hope to expand too once I have more 
finances available to me and start mirroring Linux distros and perhaps 
even OpenSolaris and BSD as well. But for now it's fairly simple stuff!


I have noticed however that with the current setup my secondary DNS is 
getting used quite a bit too as both systems are doing quite a few 
translations - luckily I have a Cisco router in place so my WAN 
connection is stable and does not crash like with a consumer based 
router..

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-18 Thread Barry Margolin
In article mailman.535.1253329254.14796.bind-us...@lists.isc.org,
 Kaya Saman samank...@netscape.net wrote:

 
  Since you haven't mentioned how many zones and records you're hosting, 
  how do you expect anyone to guess how much hardware you need?
 

 Yes thank you for pointing that out! I do apologize as I mentioned I've 
 just finished my studies and am as of yet quite in-experienced yet with 
 certain things so please do not frown upon me for that! - I know many 
 people here are top notch pro's and I do not fall into that category but 
 someone who is eager to get there :-)
 
 Anyhow, I have 4 zone files for 1 domain currently and I'm using 2 
 views; internal and external. I hope to expand too once I have more 
 finances available to me and start mirroring Linux distros and perhaps 
 even OpenSolaris and BSD as well. But for now it's fairly simple stuff!
 
 I have noticed however that with the current setup my secondary DNS is 
 getting used quite a bit too as both systems are doing quite a few 
 translations - luckily I have a Cisco router in place so my WAN 
 connection is stable and does not crash like with a consumer based 
 router..

In private email, he told me he has 59 forward and reverse records in 
the internal view, and 22 of each in the external view.

This is nothing.  A 10-year-old Pentium should be able to handle this 
without breaking a sweat.

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-18 Thread Barry Margolin
In article mailman.537.1253337654.14796.bind-us...@lists.isc.org,
 Kaya Saman samank...@netscape.net wrote:

 
  In private email, he told me he has 59 forward and reverse records in 
  the internal view, and 22 of each in the external view.
 
  This is nothing.  A 10-year-old Pentium should be able to handle this 
  without breaking a sweat.
 

 Thanks Barry, as I did mention in the beginning it is a home lab setup 
 for me to learn about network services and infrastructure a little so 
 that when I do get to industry I understand the basics and at least have 
 junior admin capabilities.
 
 But still I will be looking for a new machine so probably what I will do 
 is grab a Sun Fire X2250 single socket quad core Xeon with 2GB of memory 
 so that I can either use as virtualized primary and secondary or 
 alternatively run other services such as web server, mail server etc on top!

My point was that this is such a trivial DNS server that you can use 
whatever you want.  And running it on the same machine as other services 
should be no problem.

 How can observer the query count? Is there a command or table or 
 something or is it just how many hits the systems gets on port 53 
 identified from some form of logging software?

BIND logs hit statistics periodically to syslog, and you can use rndc 
stats to append statistics immediately to a file.  See the BIND manual 
for details.

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: Migrating DNS servers, need advice on hardware

2009-09-18 Thread James Pratt
You should really improve your google skills. If you can't even figure
out where I'm *at* well you probably really should not be in the DNS
business at all.. :)


 -Original Message-
 From: Kaya Saman [mailto:samank...@netscape.net]
 Sent: Friday, September 18, 2009 11:44 PM
 To: James Pratt
 Subject: Re: Migrating DNS servers, need advice on hardware
 
 Hmm... are you a student or admin?? As your email states you from
 Norwich university! Is that Norwich in UK or US??
 
 Kaya

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Migrating DNS servers, need advice on hardware

2009-09-18 Thread Kaya Saman




In private email, he told me he has 59 forward and reverse records in 
the internal view, and 22 of each in the external view.


This is nothing.  A 10-year-old Pentium should be able to handle this 
without breaking a sweat.


  
Thanks Barry, as I did mention in the beginning it is a home lab setup 
for me to learn about network services and infrastructure a little so 
that when I do get to industry I understand the basics and at least have 
junior admin capabilities.


But still I will be looking for a new machine so probably what I will do 
is grab a Sun Fire X2250 single socket quad core Xeon with 2GB of memory 
so that I can either use as virtualized primary and secondary or 
alternatively run other services such as web server, mail server etc on top!


How can observer the query count? Is there a command or table or 
something or is it just how many hits the systems gets on port 53 
identified from some form of logging software?


Sorry if this thread wasted everyones time!
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users