named memory usage

2014-07-25 Thread Teerapatr Kittiratanachai
Dear List, How can I approximate the memory usage of named process if I handle all IPv6/32 rDNZ on a DNS server? Regards, --teenigma ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: named memory usage

2014-07-25 Thread Mark Andrews
In message CADC-1a0j_gvJVt95G6+_Cj+mJ++LMuoB6PgDfYdQtt71S=b...@mail.gmail.com , Teerapatr Kittiratanachai writes: Dear List, How can I approximate the memory usage of named process if I handle all IPv6/32 rDNZ on a DNS server? All the memory on the planet would not be enough. There are

Re: named memory usage

2014-07-25 Thread Teerapatr Kittiratanachai
Thank Mark. Another question is how can we determine the memory usage per 1 record? --teenigma On Fri, Jul 25, 2014 at 2:00 PM, Mark Andrews ma...@isc.org wrote: In message CADC-1a0j_gvJVt95G6+_Cj+mJ++LMuoB6PgDfYdQtt71S=b...@mail.gmail.com , Teerapatr Kittiratanachai writes: Dear List,

Re: Bind and ZSK-Rollovers: Changing salt automatically?

2014-07-25 Thread Carsten Strotmann
Hello Mark, Mark Andrews ma...@isc.org writes: Actually it is useless to change the salt regularly. Changing the salt provides no real benefit against discovering the names in a zone which is the reason people were saying to change the salt. The attacker uses cached NSEC3 records. When it

Re: Bind and ZSK-Rollovers: Changing salt automatically?

2014-07-25 Thread Tony Finch
Carsten Strotmann c...@strotmann.de wrote: I do not understand how the NSEC3 hash can be defeated by an attacker. Could you give a link to additional information or could you explain the issue with NSEC3 salt in other words?