getting two rrsigs for dnskey after ksk rollover

2017-09-20 Thread rams
Greetings!!! We are getting two RRSIGs and 3 DNSKEY [ 1-256 and 2-257] when we do KSK rollover. Is it correct we are returning two RRSIGs for DNSKEY? Regards, Ramesh ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: R: Logging resolved IP

2017-09-20 Thread Tony Finch
Job wrote: > > Do you also know if it can slow down performances or it is fully transparent? I haven't given dnstap a serious test I am afraid. Tony. -- f.anthony.n.finch http://dotat.at/ - I xn--zr8h punycode Forties, Cromarty, Forth, Tyne,

R: Logging resolved IP

2017-09-20 Thread Job
>Or (on 9.11 and later) use dnstap, which should be a good deal faster. Dear Tony, thank you. It seems like a "bridge" that permit resolved IP logging. Do you also know if it can slow down performances or it is fully transparent? Thank you again! F