Re: Bind max socket/query per IP

2019-05-21 Thread Mark Andrews
You really need to read up on queuing theory. The fairest way to queue is to have a single queue and to process off the end of that. Unfortunately interfaces don’t form a single queue, they form multiple queues. This sort of behaviour is expected with multiple queues. The main address is the

Bind max socket/query per IP

2019-05-21 Thread Ict Security
Hi guys, I am experiencing a very strange problem. Under heavy load, Bind becomes extremely load above a certain number of Qps but, if i query an alias IP address (where normally queries don't arrive), Bind answers immediately. I was wondering if there is a kind of limitation on a single IP

Re: Preferred log location with ISC copr package

2019-05-21 Thread John Thurston
On 5/21/2019 5:08 AM, Michał Kępień wrote: A directory was created as part of the package installation: /var/opt/isc/isc-bind/log/ Correct, this directory is a part of the standard Software Collection runtime which is created at package build time according to macros provided by Red Hat.

Re: Should we remove the DLV code?

2019-05-21 Thread Hugo Salgado-Hernández
Last year I was involved in a project to allow the signing of domains in the second level of a country, when the TLD has signed yet. It's a reality in certain regions. I get it that the idea is to put pressure on the TLD, but this institution was the largest ISP in the country and considered that

Re: Should we remove the DLV code?

2019-05-21 Thread Warren Kumari
At this point I think DLV is actively dangerous -- I'm not sure if it "easy" to remove the code without too much risk, but an initial start would be to make it impossible^whard to enable it (and initially log an error message for people who already have it configured...). W On Tue, May 21, 2019

Re: Should we remove the DLV code?

2019-05-21 Thread Matthijs Mekking
Hi Grant, On 5/20/19 11:44 PM, Grant Taylor via bind-users wrote: On 5/20/19 4:34 AM, Matthijs Mekking wrote: * It will make the code much easier to maintain, which is beneficial for users too since that will mean in general less bugs, easier to find bugs, and easier to extend it with new

Re: Preferred log location with ISC copr package

2019-05-21 Thread Michał Kępień
Hi John, > I'm considering changing one of my BIND installations to use the > experimental ISC-provided packages: > https://www.isc.org/blogs/bind-9-packages/ > > With these packages, what it the recommended location for log files? By default, ISC packages try to mimic what stock RHEL/CentOS