Re: Bind max socket/query per IP

2019-05-22 Thread Mukund Sivaraman
On Wed, May 22, 2019 at 11:39:04PM +0200, Ict Security wrote: > Dear Klaus, > > >>btw - how high is the "extremely load"? > Without old DLZ module, Bind 9.12 scales to thousands and thousands of > queries. > If i include old DLZ module, with postgres, over about 1000 Qps Bind > start to slow

Re: Bind max socket/query per IP

2019-05-22 Thread Ict Security
Dear Klaus, >>btw - how high is the "extremely load"? Without old DLZ module, Bind 9.12 scales to thousands and thousands of queries. If i include old DLZ module, with postgres, over about 1000 Qps Bind start to slow down visibly, Do you think the old DLZ-Postgreqsl module might the bottleneck?

Re: Bind max socket/query per IP

2019-05-22 Thread Klaus Darilion
Am 21.05.2019 um 22:31 schrieb Ict Security: Under heavy load, Bind becomes extremely load above a certain number of Qps but, if i query an alias IP address (where normally queries don't arrive), Bind answers immediately. btw - how high is the "extremely load"? Klaus

Re: Bind max socket/query per IP

2019-05-22 Thread Ict Security
Dear Mark, excellent reply, thank you. I found the problem: for legacy compatibility reason, i still need to use the old Bind-DLZ Driver, with Postgresql. I have remove the Driver, used for SQL-filtering reasons, Bind work like a charm. I can remove DLZ for "emergencies periods", but i still need

Re: Bind max socket/query per IP

2019-05-21 Thread Mark Andrews
You really need to read up on queuing theory. The fairest way to queue is to have a single queue and to process off the end of that. Unfortunately interfaces don’t form a single queue, they form multiple queues. This sort of behaviour is expected with multiple queues. The main address is the

Bind max socket/query per IP

2019-05-21 Thread Ict Security
Hi guys, I am experiencing a very strange problem. Under heavy load, Bind becomes extremely load above a certain number of Qps but, if i query an alias IP address (where normally queries don't arrive), Bind answers immediately. I was wondering if there is a kind of limitation on a single IP