Re: AW: Problems with (unsigned) forward zones, dnssec-validation auto and validate-except on BIND 9.16 and 9.17

n/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

AW: Problems with (unsigned) forward zones, dnssec-validation auto and validate-except on BIND 9.16 and 9.17

a corresponding zone. But I'll try with synth-from-dnssec, that should do the trick. Thanks! --- Heiko. smime.p7s Description: S/MIME cryptographic signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from t

Re: Problems with (unsigned) forward zones, dnssec-validation auto and validate-except on BIND 9.16 and 9.17

Gehrkens.IT GmbH | Heiko Wundram wrote: > > From what I gather, this behaviour sounds almost like what RFC 8020 proposes > (NXDOMAIN cut), but at least according to the corresponding ticket, that > isn't implemented in BIND. The other things that can cause the behaviour you observ

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

>>>> over the sig-validity-interval as they fall due for re-signing. Once all >>>> those RRSIG records have been >>>> replaced and they have expired from caches, you can then delete the DNSKEY >>>> record. >>>&

Reminder: BIND 9.11 is going EOL in March 2022

Hello bind-announce, BIND 9.11 is now in its last quarter of support. We are fixing critical security issues only at this point. It is time to start making plans to update if you are still running a 9.11 version. (The current release plan is published at https://kb.isc.org/docs/aa-00896 <ht

Problems with (unsigned) forward zones, dnssec-validation auto and validate-except on BIND 9.16 and 9.17

Dear list, I'm currently setting up a resolver using bind (tested with both 9.16 and 9.17), which uses multiple views to expose forwarded zones (under .lan and .local, old Windows-AD zones which I don't control and can't change.) under some of their views. All of the views have dnssec

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

eletion date of a >> key?. sig-validity-interval and re-signing is independent of inactive and delete dates. > Mark > > Best regards > > On 25 Jan 2022, at 05:21, egoitz--- via bind-users > wrote: > > Hi!! > > Thanks a lot for your answer!! > > I tri

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

lidity-interval affect too, after the key deletion date?. >> Or does it affect only from the inactivation date to the deletion date of a >> key?. sig-validity-interval and re-signing is independent of inactive and delete dates. > Mark > > Best regards > > On

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

o add the record TTL. >> >> Ok, but does sig-validity-interval affect too, after the key deletion date?. >> Or does it affect only from the inactivation date to the deletion date of a >> key?. sig-validity-interval and re-signing is independent of inactive and del

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

ays to > which you have to add the record TTL. > > OK, BUT DOES SIG-VALIDITY-INTERVAL AFFECT TOO, AFTER THE KEY DELETION DATE?. > OR DOES IT AFFECT ONLY FROM THE INACTIVATION DATE TO THE DELETION DATE OF A > KEY?. > > Mark > > BEST REGARDS > > On 25

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

to which you have to add the record TTL. Mark > On 25 Jan 2022, at 05:21, egoitz--- via bind-users > wrote: > > Hi!! > > > > Thanks a lot for your answer!! > > > > I tried before the fact of renaming back and rndc sign... but does not > work

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

No > pinche en los enlaces ni abra los adjuntos a no ser que reconozca el > remitente y sepa que el contenido es seguro. > > egoitz--- via bind-users wrote: > >> These are the contents of a cat of the private file I have renamed to >> samename.private-OLD : >> &

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

egoitz--- via bind-users wrote: > > These are the contents of a cat of the private file I have renamed to > samename.private-OLD : > > Created: 20211031230338 > Publish: 2020220241 > Activate: 2020220341 > Inactive: 20211215230338 > Delete: 20211217230338 Ye

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

e date of 44526 is > very old > > Anyway that could explain the error : "dns_dnssec_keylistfromrdataset: error > reading .private: File not found", because it seems Bind source code, > checks the DNSKEY and later tries to load that keys. As the files fo

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

date of 44526 is > very old > > Anyway that could explain the error : "dns_dnssec_keylistfromrdataset: error > reading .private: File not found", because it seems Bind source code, > checks the DNSKEY and later tries to load that keys. As the files for ke

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

of 44526 is very old Anyway that could explain the error : "dns_dnssec_keylistfromrdataset: error reading .private: File not found", because it seems Bind source code, checks the DNSKEY and later tries to load that keys. As the files for keyid 44526 don't exist, that could (a

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

r that key These are the contents of a cat of the private file I have renamed to samename.private-OLD : Created: 20211031230338 Publish: 2020220241 Activate: 2020220341 Inactive: 20211215230338 Delete: 20211217230338 Not understandable Cheers, El 2022-01-24 14:58, egoitz--- via bind-users escri

Re: AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

Hi Klaus, Thank you so much for your answer but when Bind deletes a key from a zone, if I remember correctly, there should not be any rrsig still active, signed previously by the deleted key. Isn't it?. So I assume in that case, I should be doing it properly but still see these messages. Am I

AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

IIRC, Bind needs the key as long as there are signatures in the zone generated by this key. After key deactivation I waited the RRSIG lifetime before deleting them. regards Klaus Von: bind-users Im Auftrag von egoitz--- via bind-users Gesendet: Montag, 24. Jänner 2022 13:00 An: bind-users

Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

here and all working. I have seen, that Bind logs in messages log file sometimes the following error logs : _dns_dnssec_keylistfromrdataset: error reading /xxx/xxx/xxx/xx-domain/named.aaa/aaa.xx.+008+41919.private: file not found_ That "file not found" is due to a rename of

Aw: No "notify" category debug log entries anymore with Bind 9.11.3

4 Uhr > Von: "Hildegard Meier" > An: "Hildegard Meier" > Cc: bind-users@lists.isc.org > Betreff: Aw: No "notify" category debug log entries anymore with Bind 9.11.3 > > Additional difference between the old Bind 9.8.1 Host and the new Bind 9.11.3 >

Aw: No "notify" category debug log entries anymore with Bind 9.11.3

Additional difference between the old Bind 9.8.1 Host and the new Bind 9.11.3 Host is that the new (test) Host cannot (and shall not) reach the external DNS servers that are in the SOA records of the DNS zones we host as "hidden primary" and notify to the external bind hosts

Aw: No "notify" category debug log entries anymore with Bind 9.11.3

Please see my comments between the citates. > Betreff: No "notify" category debug log entries anymore with Bind 9.11.3 > > On old server with Ubuntu 12 and Bind 9.8.1 > I got the following "notify" category log entries as expected (domain names > and IP address

Re: How to show run the active configuration on bind

Mik J via bind-users wrote: > How can I check which variables are loaded in memory and considered as active. As Ray said, usually it isn't ambiguous. But there are a couple of semi-relevant tools that are worth knowing about: You can use `named-checkconf -p` to canonicalize your configurat

Re: How to show run the active configuration on bind

On 04/01/2022 16:53, Mik J via bind-users wrote: Hello, How can I check which variables are loaded in memory and considered as active. For example, I would like to check that the value of lame-ttl is 0 In my named.conf configuration file I have include "myconf.conf"; la

How to show run the active configuration on bind

can I make sure which value is used ? Thank you ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.o

No "notify" category debug log entries anymore with Bind 9.11.3

On old server with Ubuntu 12 and Bind 9.8.1 I got the following "notify" category log entries as expected (domain names and IP addresses redacted): 27-Dec-2021 12:58:51.786 notify: debug 3: zone example.com/IN: sending notify to 1.2.3.4#53 27-Dec-2021 12:58:51.816 notify: deb

Re: (BIND) Re: Change records in DNS slave if master is offline

> > // > > > // many other options > > > // > > > } > > > > > > The raw (binary) zone files are good for large zones, but for small > > zones, where speed isn't super important, text format works just fine... > > > W > > > > > > > > >> > > >>

New BIND releases are available: 9.16.24 and 9.17.21

Our December maintenance releases of BIND are available and can be downloaded from the ISC software download page, https://www.isc.org/download This month there were no significant changes to the 9.11 branch and as a result there is no December release for it. More significant changes were

New BIND releases are available: 9.16.24 and 9.17.21

Our December maintenance releases of BIND are available and can be downloaded from the ISC software download page, https://www.isc.org/download This month there were no significant changes to the 9.11 branch and as a result there is no December release for it. More significant changes were

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

e more DHCP problems than I anticipated, but this is off topic for the BIND-users list I suppose. Thank you very much for all the help! I thought of writing some dissemination on the problem, maybe a web page or something people could Google up so you do not always reply to the same que

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

t 193.198.186.201 to test-record2.slava.alu.hr. It was unable to sum up the things together? Thanks again, I will happy that the reverse /27 subnet DDNS DHCP setup works. Kind regards, Mirsad Todorovac On 13.12.2021. 7:10, Crist Clark wrote: First, for troubleshooting, do not use nslookup(1)

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

tup works. Kind regards, Mirsad Todorovac On 13.12.2021. 7:10, Crist Clark wrote: First, for troubleshooting, do not use nslookup(1). If you have BIND, use dig(1) and host(1). Since these names are out there on the Internet, we can troubleshoot too! I'm noticing a problem with t

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

First, for troubleshooting, do not use nslookup(1). If you have BIND, use dig(1) and host(1). Since these names are out there on the Internet, we can troubleshoot too! I'm noticing a problem with the delegation for the 192/27.186.198.193.in-addr.arpa zone. The servers for 186.198.193

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

. 201 IN  CNAME   201.186.198.193.dhcp.slava.alu.hr. nslookup 193.198.186.200 works and .201 doesn't, despite the symmetric definition: root@domac:/etc/bind/zones# nslookup 193.198.186.200 200.186.198.193.in-addr.arpa    canonical name = 200.192/27.186.198.193.in-addr.arpa. 200.192

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet P.S.

AIN root@domac:~# This kind of setup that sometimes works and sometimes doesn't will make me look incompetent. I know that BIND 9 is great open source server with lots of bells and whistles. But right now I can't study all those and I just want to survive, providing

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

ind 195.186.198.193.in-addr.arpa: NXDOMAIN root@domac:~# This kind of setup that sometimes works and sometimes doesn't will make me look incompetent. I know that BIND 9 is great open source server with lots of bells and whistles. But right now I can't study all those and I ju

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

53.235.3#53 > > ** server can't find 195.186.198.193.in-addr.arpa: NXDOMAIN > > root@domac:~# > > This kind of setup that sometimes works and sometimes doesn't will make me > look incompetent. > I know that BIND 9 is great open source server with lots of bells and > whistle

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

look incompetent. I know that BIND 9 is great open source server with lots of bells and whistles. But right now I can't study all those and I just want to survive, providing a solution fast enough for our uplevel sysadmins. The /etc/bind/named.conf.local part looks like: zone "192/27.186.19

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

Hi Crist, Thank you for your reply and the information provided. I have roughly implemented this workaround. I was hoping there was a way to instruct BIND to masquerade a delegated domain with data from another (dynamically updated from ISC DHCP) zone. More accurately, my (from upper level

Re: ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

, Dec 10, 2021 at 2:51 PM Mirsad Goran Todorovac < mirsad.todoro...@alu.unizg.hr> wrote: > Hello, > > I have a problem with DHCP DDNS update to BIND 9 reverse PTR zone subnet > that is owned by several organizations, so I can't get a direct DHCP DDNS > update access with a

ISC-DHCP and BIND 9 DNS: DDNS update fails for /27 subnet

Hello, I have a problem with DHCP DDNS update to BIND 9 reverse PTR zone subnet that is owned by several organizations, so I can't get a direct DHCP DDNS update access with a key or with hostname. I have been delegated domain name |192-27.186.198.193.in-addr.arpa from the upper level admins

Re: bind-chroot queries on symbolic Links to named.conf

On 12/9/21 12:18 AM, Harshith Mulky wrote: Hello Experts Hi, I'm fairly certain that I'm not an expert, but I've dealt with BIND in chroot recently. I need some help with bind-chroot We are running below version of bind and bind-chroot bind-9.11.2-lp151.10.1.x86_64 bind-chrootenv-9.11.2

bind-chroot queries on symbolic Links to named.conf

Hello Experts I need some help with bind-chroot We are running below version of bind and bind-chroot bind-9.11.2-lp151.10.1.x86_64 bind-chrootenv-9.11.2-lp151.10.1.x86_64 Our Automation code is running to add Zone files to /var/lib/named/etc/named.conf only and not to /etc/named.conf So

Fwd: Issues with Bind 9.16.23 on Windows

Greetings, We are running Bind on a Windows Server as a Forward only server. We have our Windows DNS Servers which use these forwarders for Non-Authoritative Requests. We keep getting the service stopped with an error in the event viewer based on the query load. On a light day we get no issues

New BIND releases are available: 9.16.23 and 9.17.20

Our September maintenance releases of BIND are available and can be downloaded from the ISC software download page, https://www.isc.org/download This month there were no significant changes to the 9.11 branch and as a result there is no November release for it. More significant changes were

Re: BIND caching of nxdomain responses

tps://lists.dns-oarc.net/pipermail/dns-operations/2021-September/021362.html Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerdns.com/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC fu

Re: Query on issue#2389 BIND 9.16.10

-- Ondřej Surý (He/Him) ond...@isc.org > On 27. 10. 2021, at 7:03, Mayank Maheshwari M > wrote: > > Hi Ondrej, > > Thanks for all your responses so far. > > As per the recommendation from BIND community we plan to proceed with an > upgrade to latest BIND vers

RE: Query on issue#2389 BIND 9.16.10

Hi Ondřej We have gone thru the issue " https://gitlab.isc.org/isc-projects/bind9/-/issues/2389; and could not find the scenario which causes this issue. Before upgrading to latest BIND, we want to reproduce the issue in our labs. In the issue it is mentioned that "The s

Re: BIND caching of nxdomain responses

the NXDOMAIN. > >I have a situation where I am seeing different behavior from that in BIND. >Given the following SOA record: > >azure.mongodb.net. 900 IN SOA ns-1430.awsdns-50.org. >awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 > >I am finding that B

Re: BIND caching of nxdomain responses

the SOA.minimum field. It does not look like Route53 is doing this. I am guessing that BIND is interpreting RFC2308 this way as well, and using the TTL value of the SOA record in the nxdomain response to determine how long to cache the nxdomain response. Can anyb

Re: BIND caching of nxdomain responses

is lower of the SOA TTL, and the SOA.minimum value as the > >length of time to cache the NXDOMAIN. > > > >I have a situation where I am seeing different behavior from that in BIND. > >Given the following SOA record: > > > >azure.mongodb.net.

Re: BIND caching of nxdomain responses

have a situation where I am seeing different behavior from that in BIND. Given the following SOA record: azure.mongodb.net. 900 IN SOA ns-1430.awsdns-50.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 I am finding that BIND (9.11.x) is caching the NXDOMAIN response

BIND caching of nxdomain responses

am seeing different behavior from that in BIND. Given the following SOA record: azure.mongodb.net. 900 IN SOA ns-1430.awsdns-50.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 I am finding that BIND (9.11.x) is caching the NXDOMAIN response for 900s (SOA TTL), instead

Pre-announcement of a BIND security issue scheduled for disclosure 27 October 2021

Hello, As part of our policy of pre-notification of upcoming security releases, we are writing to inform you that the October 2021 BIND maintenance releases that will be released on Wednesday, 27 October, will contain a patch for a security vulnerability affecting the BIND 9.11.x, 9.16.x

Re: Query on issue#2389 BIND 9.16.10

BIND 9.16.10 was tagged and released in December 2020. That’s almost a year ago. You can’t and should not expect people do work for free when you slacked on updates. You have to carry the costs of the bad decision you made when you decided to stick with old version. The word “free” in free

RE: Query on issue#2389 BIND 9.16.10

the quick resolution as soon as possible. Continuing on mail thread “bind-users@lists.isc.org<mailto:bind-users@lists.isc.org>” we have asked for more info on top of your response. We shall be more than happy if you look into the last thread and share more info on the scenario. Regards R

Query on issue#2389 BIND 9.16.10

, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > 

Re: Query on issue#2389 BIND 9.16.10

, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > >

Re: Query on issue#2389 BIND 9.16.10

Am 19.10.21 um 00:46 schrieb raf: On Mon, Oct 18, 2021 at 01:02:07PM +0200, Reindl Harald wrote: Am 18.10.21 um 12:57 schrieb Rajnish Kamboj via bind-users: Upgrading to latest release will fix the issue lesson to learn: report issues after you made sure you are using the latest

Re: Query on issue#2389 BIND 9.16.10

On Mon, Oct 18, 2021 at 01:02:07PM +0200, Reindl Harald wrote: > Am 18.10.21 um 12:57 schrieb Rajnish Kamboj via bind-users: > > Upgrading to latest release will fix the issue > > lesson to learn: report issues after you made sure you are using the latest > version which

Re: Query on issue#2389 BIND 9.16.10

to why this issue is occurring? > May be this will help us in quick workaround (if possible) till the time we > plan for latest BIND. > > > Regards > Rajnish Kamboj > > -Original Message- > From: Ondřej Surý > Sent: Monday, October 18, 2021 3:28 PM > To: Rajni

Re: Query on issue#2389 BIND 9.16.10

Am 18.10.21 um 12:57 schrieb Rajnish Kamboj via bind-users: Upgrading to latest release will fix the issue lesson to learn: report issues after you made sure you are using the latest version which probably would fix it Can you also help us with scenarios as to why this issue is occurring

RE: Query on issue#2389 BIND 9.16.10

Thanks Ondrej for your quick reply, Upgrading to latest release will fix the issue. Can you also help us with scenarios as to why this issue is occurring? May be this will help us in quick workaround (if possible) till the time we plan for latest BIND. Regards Rajnish Kamboj -Original

Re: Query on issue#2389 BIND 9.16.10

-- Ondřej Surý (He/Him) ond...@isc.org > On 18. 10. 2021, at 11:51, Rajnish Kamboj via bind-users > wrote: > > Hi Team, > Currently we are using Bind version 9.16.10, > > My Query > I recently found that there is an issue with the 9.16.10 version. "Issue#2389 >

Query on issue#2389 BIND 9.16.10

Hi Team, Currently we are using Bind version 9.16.10, My Query I recently found that there is an issue with the 9.16.10 version. "Issue#2389 BIND 9.16.10: critical: xfrout.c:1643: INSIST(xfr->sends == 0) failed". Can anyone please help me to understand the scenario when this issue

Re: force nameserver(bind) information exchanges with clients via tcp only

Hi Donika, I would recommend adding dnsdist proxy on top of BIND 9. I believe it has all the tools you need (TCPRule as selector and TCAction to truncate). You can run dnsdist on external interface and named on localhost. Using the right tool for the job is half of the success ;) Ondřej

Re: force nameserver(bind) information exchanges with clients via tcp only

    response-policy {     zone "rpz.example.com" policy tcp-only;     }; and the appropriate CNAME record for rpz-tcp-only. in rpz.example.com. Neither worked out. I know this scenario is not compliant to standard DNS, it is only an experimental setup. I am

Re: force nameserver(bind) information exchanges with clients via tcp only

-- Fred ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing

Re: force nameserver(bind) information exchanges with clients via tcp only

. As a consequence, TCP is never tried. 1980s stub resolver logic. -- Fred ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions

Re: force nameserver(bind) information exchanges with clients via tcp only

t;     zone "rpz.example.com" policy tcp-only; >     }; > > and the appropriate CNAME record for rpz-tcp-only. in > rpz.example.com. > > Neither worked out. > > I know this scenario is not compliant to standard DNS, it is only an > experimental setup. > I am usi

Re: force nameserver(bind) information exchanges with clients via tcp only

nfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: force nameserver(bind) information exchanges with clients via tcp only

the (UDP) response, they'll never try TCP. (1980s logic) What you can do is force the clients to use TCP... or TLS. https://github.com/m3047/tcp_only_forwarder Good luck... -- Fred Morris ___ Please visit https://lists.isc.org/mailman/listinfo/bind

force nameserver(bind) information exchanges with clients via tcp only

it is only an experimental setup. I am using bind 9.16.1 and the OS is Ubuntu 20.04. If anyone has ideas on how to achieve this with bind, it would be very helpful. Best Regards, Donika Mirdita ___ Please visit https://lists.isc.org/mailman/listinfo/

Re: CPU core load not distributing with bind 9.16.21

021, at 15:21, rams wrote: > >  > Hi, > I am using bind 9.16.21 on ubuntu. When I am running dnsperf against that, > always load is going one CPU core, because of this issue, I am seeing less > QPS. Has anyone faced the same issue? Could you please someone look int

CPU core load not distributing with bind 9.16.21

Hi, I am using bind 9.16.21 on ubuntu. When I am running dnsperf against that, always load is going one CPU core, because of this issue, I am seeing less QPS. Has anyone faced the same issue? Could you please someone look into this and help me with this? Regards, Ramesh

Re: BIND benchmark tool

verage response time, error count, > time out count etc. Something like FIO for IO devices, but for DNS? > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > ISC funds the developmen

Re: BIND benchmark tool

of queries, in parallel to specified DNS servers and calculates the results, with average response time, error count, time out count etc. Something like FIO for IO devices, but for DNS? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

BIND benchmark tool

? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list

CPU core load not distributing with bind 9.16.21

Hi, I am using bind 9.16.21 on ubuntu. When I am running dnsperf against that, always load is going one CPU core, because of this issue, I am seeing less QPS. Has anyone faced the same issue? Could you please someone look into this and help me with this? Regards, Ramesh

Re: bind extended dns error

Reading and parsing EDE is added in June 2020. versions 9.11.20, 9.16.4, 9.17.2. Setting EDE is not yet supported. There has been done preliminary work to set a few options at the IETF110 Hackathon, but this work hasn't made any BIND release yet. Best regards, Matthijs On 07-09-2021 14:35

RE: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

I agree! BIND 9.16.21 is working just fine for me on Windows Server 2019 with either 8 or 12 vCPUs. Thanks, ISC BIND team. Richard. From: Sami Leino Sent: 17 September 2021 8:49 am To: Richard T.A. Neal ; bind-us...@isc.org Subject: VS: BIND 9.16.19 or any version newer than 9.16.15 does

VS: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

So I also verify that this problem with vCPU (8) is fixed in the 9.16.21 release. THANK YOU! ( ❛ ͜ʖ ❛ )✌ T. Sami Leino / Q-Net Oy Lähettäjä: bind-users Puolesta Richard T.A. Neal Lähetetty: torstai 9. syyskuuta 2021 2.16 Vastaanottaja: bind-us...@isc.org Aihe: RE: BIND 9.16.19 or any

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

On 9/13/21 09:40, Ondřej Surý wrote: Hi, if you have reliable reproducer, please fill an issue at https://gitlab.isc.org/isc-projects/bind9/-/issues While this mailing list is monitored by the BIND 9 team, it’s more practical to have an issue filled by a person experiencing the problem

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

> On 13 Sep 2021, at 09:40, Ondřej Surý wrote: > > Hi, > > if you have reliable reproducer, please fill an issue at > https://gitlab.isc.org/isc-projects/bind9/-/issues > > While this mailing list is monitored by the BIND 9 team, it’s more practical > to have an

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

Hi, if you have reliable reproducer, please fill an issue at https://gitlab.isc.org/isc-projects/bind9/-/issues While this mailing list is monitored by the BIND 9 team, it’s more practical to have an issue filled by a person experiencing the problem where we can interact directly and ask

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

... Will be good to check with you at the end of the week to see how it's going. (even though I didn’t put a listen-on { any; }; clause. This is weird. If you are not listening on all interfaces, why would BIND care about an interface that has no IP address, then? Mark

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

> On 10 Sep 2021, at 13:30, Mark Tinka wrote: > > > > On 9/10/21 12:35, sth...@nethelp.no wrote: > >> Freebsd 12.2-STABLE here with servers running BIND 9.16.15, 9.16.18 >> and 9.16.20, all using libuv 1.41.0, all installed from ports. Typical >> query l

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

On 9/10/21 12:35, sth...@nethelp.no wrote: Freebsd 12.2-STABLE here with servers running BIND 9.16.15, 9.16.18 and 9.16.20, all using libuv 1.41.0, all installed from ports. Typical query load from around 3k qps to around 14k qps. No sign of any memory leak. Would be interesting to hear

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

or and my recursives handle about 100,000 requests > per minute. Freebsd 12.2-STABLE here with servers running BIND 9.16.15, 9.16.18 and 9.16.20, all using libuv 1.41.0, all installed from ports. Typical query load from around 3k qps to around 14k qps. No sign of any memory leak. Steinar Haug, N

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

see 1.42.0 was released 4 days ago. Also, did you install bind 9.16 from ports or from a package? From ports, which options did you enable? From ports with default options:     - DNSTAP     - DOCS     - IDN     - JSON     - MANPAGES     - TCP_FASTOPEN     - DLZ_FILESYSTEM Mark

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

I haven’t seen that behavior and my recursives handle about 100,000 requests per minute. Just in case I have updated libuv on one of them. Also, did you install bind 9.16 from ports or from a package? From ports, which options did you enable? Cheers, Borja. ___

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https

RE: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

the following Registry Key: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\named Then set "Image Path" to be: C:\BIND\bin\named.exe -n 7 That would tell named to run using only 7 vCPUs. But that doesn't work for me, it still refuses to start the service. I'm sorry that I've b

Re: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

Hi there, On Wed, 8 Sep 2021, Sami Leino wrote: I will return to this problem with 8 vCPU count. You wrote earlier that there could be a way to have BIND run a specific number of vCPU cores? Have you tried searching something like "windows processor affinity"? -

VS: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

Hi Richard, I will return to this problem with 8 vCPU count. You wrote earlier that there could be a way to have BIND run a specific number of vCPU cores? Because with the current setup we cannot change the server's vCPU count. BR, Sami Leino / Q-Net Oy Lähettäjä: bind-users Puolesta Sami

bind extended dns error

Hi, What version of bind is supporting "extended dns error (EDE)"? Do i have to do any configuration changes to enable EDE? Currently I am running BIND 9.16.18 as recursive server. BR, Sachchidanand ___ Please visit https://lis

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

So I've decided to downgrade our busiest resolvers to bind911-9.11.35. Mark. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

I'm seriously considering going back to BIND-9.11. Mark. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

On 9/3/21 07:17, Mark Tinka wrote: Let me monitor and report back. Thanks. So since running the updated interface changes from Friday, BIND died again due running out swap space, earlier today. Seems like it may be more than how BIND is listening on various interfaces. Are you able

<    2   3   4   5   6   7   8   9   10   11   >