Re: Feature request - disable internal recursion cache

2009-12-02 Thread Kevin Darcy
Dmitry Rybin wrote: I found answer for my feature request - simple C proxer: http://www.wolfermann.org/dnsproxy.html It can forward queries to auth or recursion server. Based on client IPs. So, what does a dnsproxy approach accomplish, that can't be achieved with less processes, and less listen

Re: Feature request - disable internal recursion cache

2009-12-02 Thread Dave Sparro
On Wed, Dec 2, 2009 at 9:43 AM, Dmitry Rybin wrote: > I found answer for my feature request - simple C proxer: > http://www.wolfermann.org/dnsproxy.html > > It can forward queries to auth or recursion server. Based on client IPs. > What if one of your access customers is running their own DNS ser

Re: Feature request - disable internal recursion cache

2009-12-02 Thread Dmitry Rybin
I found answer for my feature request - simple C proxer: http://www.wolfermann.org/dnsproxy.html It can forward queries to auth or recursion server. Based on client IPs. FreeBSD port /usr/ports/dns/dnsproxy/ ___ bind-users mailing list bind-users@list

Re: Feature request - disable internal recursion cache

2009-11-03 Thread JINMEI Tatuya / 神明達哉
At Mon, 02 Nov 2009 18:24:54 +0300, Dmitry Rybin wrote: > > Kevin Darcy wrote: > >> Daemon as unbound, pdns-recursor - much faster in recursion queries, > >> that bind. :( > >> ___ > > So, you don't cache locally, you forward to another daemon that (in

Re: Feature request - disable internal recursion cache

2009-11-02 Thread Kevin Darcy
Barry Margolin wrote: In article , Kevin Darcy wrote: Chris Thompson wrote: On Oct 30 2009, Michael Hare wrote: For those of us that are still running auth and recursive on the same IP, I believe the benefit would be to deploy a best practices recursive only nameserver on a

Re: Feature request - disable internal recursion cache

2009-11-02 Thread Kevin Darcy
Dmitry Rybin wrote: Kevin Darcy wrote: Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( ___ So, you don't cache locally, you forward to another daemon that (in the best case) answers from *its* cache. How have you

Re: Feature request - disable internal recursion cache

2009-11-02 Thread Dmitry Rybin
Matus UHLAR - fantomas wrote: Bind answer authoritative for all clients, and forward (if allowed) recursive queries to recursive server. why shouldn't it cache those responses? Bind cache is slow. It allocate a lot of memory and make high CPU usage. _

Re: Feature request - disable internal recursion cache

2009-11-02 Thread Dmitry Rybin
Kevin Darcy wrote: Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( ___ So, you don't cache locally, you forward to another daemon that (in the best case) answers from *its* cache. How have you improved performance

Re: Feature request - disable internal recursion cache

2009-11-01 Thread Matus UHLAR - fantomas
> Niall O'Reilly wrote: > >>> I think, that be useful make this feature in bind: >>> Add option to disable internal recursion cache, and forward all >>> recursive queries to another daemon. >>> >>> Daemon as unbound, pdns-recursor - much faster in recursion queries, >>> that bind. :( >> >>

Re: Feature request - disable internal recursion cache

2009-10-31 Thread Michael Hare
Well, except then you need to update all of your delegations. That can not only be an administrative hassle, but can also get very expensive, especially if you have hundreds of them in ccTLDs, where you have to pay your "in-country agent" a fee for every registry change. It's quite a racket.

Re: Feature request - disable internal recursion cache

2009-10-31 Thread Barry Margolin
In article , Kevin Darcy wrote: > Chris Thompson wrote: > > On Oct 30 2009, Michael Hare wrote: > > > >> For those of us that are still running auth and recursive on the same > >> IP, I believe the benefit would be to deploy a best practices > >> recursive only nameserver on a different machin

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Mark Andrews
In message <4aeb00d0.8030...@doit.wisc.edu>, Michael Hare writes: > For those of us that are still running auth and recursive on the same > IP, I believe the benefit would be to deploy a best practices recursive > only nameserver on a different machine/IP address without getting, in my > case,

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Kevin Darcy
Chris Thompson wrote: On Oct 30 2009, Michael Hare wrote: For those of us that are still running auth and recursive on the same IP, I believe the benefit would be to deploy a best practices recursive only nameserver on a different machine/IP address without getting, in my case, possibly hundr

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Chris Thompson
On Oct 30 2009, Michael Hare wrote: For those of us that are still running auth and recursive on the same IP, I believe the benefit would be to deploy a best practices recursive only nameserver on a different machine/IP address without getting, in my case, possibly hundreds of thousands of cli

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Kevin Darcy
Getting clients to change their resolvers can be challenging, especially if there are large numbers of them and many/most of them don't get their resolvers via DHCP. But I think the answer to that challenge is to come up with better ways of managing clients, not to add a "proxy mode" to BIND.

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Michael Hare
For those of us that are still running auth and recursive on the same IP, I believe the benefit would be to deploy a best practices recursive only nameserver on a different machine/IP address without getting, in my case, possibly hundreds of thousands of clients to change their DNS resolver IP

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Kevin Darcy
Dmitry Rybin wrote: Hello everybody! I think, that be useful make this feature in bind: Add option to disable internal recursion cache, and forward all recursive queries to another daemon. Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( ___

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Kevin Darcy
Dmitry Rybin wrote: Niall O'Reilly wrote: I think, that be useful make this feature in bind: Add option to disable internal recursion cache, and forward all recursive queries to another daemon. Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( I don't see

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Dmitry Rybin
Niall O'Reilly wrote: I think, that be useful make this feature in bind: Add option to disable internal recursion cache, and forward all recursive queries to another daemon. Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( I don't see the point. I

Re: Feature request - disable internal recursion cache

2009-10-30 Thread Niall O'Reilly
Dmitry Rybin wrote: Hello everybody! I think, that be useful make this feature in bind: Add option to disable internal recursion cache, and forward all recursive queries to another daemon. Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( I don't se

Feature request - disable internal recursion cache

2009-10-30 Thread Dmitry Rybin
Hello everybody! I think, that be useful make this feature in bind: Add option to disable internal recursion cache, and forward all recursive queries to another daemon. Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :(