Re: DNSSEC problem with our zone

2022-05-18 Thread Bjørn Mork
Mirsad Goran Todorovac writes: > Dear All, > > In the past three days I have just made our domain DNSSEC > signed. However, I seem to be missing something. > > When I query other DNS servers, like CloudFlare 1.0.0.1, I get the > "ad" flag. > > But in my own domain, and my own domain servers, the

DNSSEC problem with our zone

2022-05-18 Thread Mirsad Goran Todorovac
Dear All, In the past three days I have just made our domain DNSSEC signed. However, I seem to be missing something. When I query other DNS servers, like CloudFlare 1.0.0.1, I get the "ad" flag. But in my own domain, and my own domain servers, the "ad" flag is still missing:

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Ondřej Surý
Hi Klarstein, Gathering the output of named statschannel should be good enough for initial assessment (json please). For 9.18, make sure the jemalloc is being used at runtime. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

AW: AW: High memory consumption in bind 9.18.2

2022-05-18 Thread Klaus Darilion via bind-users
Can you please provide some commands whose output you are interested? I want to collect the statistics for 9.16 before updating to 9.18. Thanks Klaus > -Ursprüngliche Nachricht- > Von: bind-users Im Auftrag von Petr > Špacek > Gesendet: Mittwoch, 18. Mai 2022 18:20 > An:

Re: Only one DS key comes back in query

2022-05-18 Thread Mark Andrews
I suspect that you failed to copy the complete second record or that the registrar failed to handle the optional white space in the last field. Without you posting the contents of the dsset file and what you passed to the registrar there is no way to know. There is also no way to know if it

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Ondřej Surý
Also please note that proper measurement of memory consumption is needed. There’s some good (semi-accurate) stuff at SO and it needs to be correlated with the statschannel output from named. Running “free” doesn’t measure memory consumption by any program. Ondřej -- Ondřej Surý — ISC (He/Him)

Re: AW: High memory consumption in bind 9.18.2

2022-05-18 Thread Petr Špaček
I would be very interested in hearing more! In majority of our internal testing 9.16 has higher memory consumption than 9.18, especially when 9.18 is compiled with libjemalloc. And the differences are not small, for some configurations it can be even 2x or 3x more on 9.16 than it is on 9.18.

Re: Only one DS key comes back in query

2022-05-18 Thread Matthew Pounsett
On Mon, May 16, 2022 at 2:41 PM frank picabia wrote: > I've been using open source for decades. Long enough that I rarely need > to use lists for help. > > Here's the RFC mentioning reserved domain name use: > https://www.rfc-editor.org/rfc/rfc2606.html > Those reservations are for testing and

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Raman kumar
Hello, Please find the details below. Free command is used to check RAM available/used. space used is 50GB on RHEL 7.9 in bind version 9.18.2 whereas in bind version 9.16.10 RAM space used is 44 GB with the same amount of data and configuration. free -g totalused

Re: Correct response to NS request in case of dual delegation when one delegation returns REFUSED

2022-05-18 Thread Ondřej Surý
Hi, > 1) client asks Bind: what is NS for "cluster"? > 2) Bind seems to issue requests to both "storage1" and "storage2" for "NS > cluster", one of which always returns "REFUSED" > 3) Answer of Bind to client does not contain the one that was "refused". no, I think it’s different problem.

Correct response to NS request in case of dual delegation when one delegation returns REFUSED

2022-05-18 Thread Marki
Hello, We are currently working with a product called Superna Eyeglass which can be used for DR purposes on Powerscale (Dell storages). Quick background: Powerscale leverages DNS to create redundant and load-balanced frontend access. Without going into many details, Powerscale replies to

AW: High memory consumption in bind 9.18.2

2022-05-18 Thread Klaus Darilion via bind-users
I remember we had similar issues with 9.18 (isc ppa packages) and hence wen't back to 9.16. But I can not remember the details. regards Klaus > -Ursprüngliche Nachricht- > Von: bind-users Im Auftrag von Ondrej > Surý > Gesendet: Mittwoch, 18. Mai 2022 08:37 > An: Raman kumar > Cc:

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Ondřej Surý
You did not provided any details, so we can’t really help you. What is “RAM consumption” anyway? VSZ, RSS, numbers pulled from stats channel from named? What’s the hardware, what is the configuration, how was BIND 9 compiled (or packaged)? The more details, the better Ondrej -- Ondřej Surý

High memory consumption in bind 9.18.2

2022-05-18 Thread Raman kumar
Hello Team, While upgrading from BIND 9.16.10 to 9.18.2, we have observed high memory consumption. On version 9.16.2, RAM consumption was 3.8 GB. And on 9.18.2, RAM consumption is 4.5 GB. Due to this an increase of approximately 20 % memory is observed. Is this the expected behaviour or any