Re: "clients-per-query" vs "max-clients-per-query"

2014-06-08 Thread Timothe Litt
I guess I confuse easily...still Either I don't understand what it's doing, or I don't understand why it's doing what it is, or what it's doing is confused. Sigh. On 08-Jun-14 14:24, Evan Hunt wrote: > On Sun, Jun 08, 2014 at 09:45:23AM -0400, Timothe Litt wrote: >> Consider a continuous stream

Re: Re: "clients-per-query" vs "max-clients-per-query"

2014-06-08 Thread Evan Hunt
On Sun, Jun 08, 2014 at 09:45:23AM -0400, Timothe Litt wrote: > Consider a continuous stream of queries to a slow server. For the sake > of exposition, assume the incremental adjustment is 1 rather than 5. > > Named drops the 11th query, but increases the limit. It only increases the limit if on

Re: Re: "clients-per-query" vs "max-clients-per-query"

2014-06-08 Thread Timothe Litt
On 07-Jun-14 12:36, Evan Hunt wrote: > On Sat, Jun 07, 2014 at 12:02:24PM -0400, Jorge Fábregas wrote: >> For me, this "clients-per-query" of 10 is an upper limit (maximum number >> of clients before it starts dropping). So then, what's the purpose of >> &quo

Re: "clients-per-query" vs "max-clients-per-query"

2014-06-07 Thread Jorge Fábregas
On 06/07/2014 12:36 PM, Evan Hunt wrote: > Over time, as it runs, named tries to self-tune the clients-per-query > value. > > If you set clients-per-query to 10 and max-clients-per-query to 100 > (i.e., the default values), that means that the initial limit will be > 10, but i

Re: "clients-per-query" vs "max-clients-per-query"

2014-06-07 Thread Evan Hunt
On Sat, Jun 07, 2014 at 12:02:24PM -0400, Jorge Fábregas wrote: > For me, this "clients-per-query" of 10 is an upper limit (maximum number > of clients before it starts dropping). So then, what's the purpose of > "max-clients-per-query"? Over time, as it

"clients-per-query" vs "max-clients-per-query"

2014-06-07 Thread Jorge Fábregas
Hi, I'm trying to understand the difference between clients-per-query & max-clients-per-query. I found a nice explanation by Mark Andrews here [1] but then I wondered about max-clients-per-query. Given a "clients-per-query" of 10, I assume that named will only queue up 1

Re: clients-per-query

2013-04-10 Thread Dwayne Hottinger
> >3000 devices isn't much, even for a modest BIND server. Did this > >configuration work in the past? What changed? Is there a network rate > >limiting device in place that could be affecting the queries to the > >authoritative servers? Have you talked to your networking team? They > >would n

Re: clients-per-query

2013-04-10 Thread WBrown
Dwayne Hottinger wrote on 04/10/2013 10:27:24 AM: > Sorry, My spambox grabbed your earlier reply, my apologies.My > clients are a mixed enviroment of macs,windows 7/xp, androids, etc. > At any one time I'll have over 3000 devices connected to the > network. I actually have one internal

Re: clients-per-query

2013-04-10 Thread Dwayne Hottinger
Sorry, My spambox grabbed your earlier reply, my apologies.My clients are a mixed enviroment of macs,windows 7/xp, androids, etc. At any one time I'll have over 3000 devices connected to the network. I actually have one internal dns server for internal network and 2 external dns servers. I tu

Re: clients-per-query

2013-04-10 Thread WBrown
> From: Dwayne Hottinger > I keep seeing messages in my named.log file that say things > like clients-per-query increased to 30, then later it says clients- > per-query decreased to a lower number. When this happens, lookups > seem to not be working.What is an acceptable va

clients-per-query

2013-04-10 Thread Dwayne Hottinger
I keep seeing messages in my named.log file that say things like clients-per-query increased to 30, then later it says clients-per-query decreased to a lower number. When this happens, lookups seem to not be working.What is an acceptable value for a large network? ddh -- Dwayne Hottinger

Re: clients-per-query increased to 15

2013-04-10 Thread Matus UHLAR - fantomas
On 09.04.13 13:56, Dwayne Hottinger wrote: Ive started having some issues with one of my subnets. Im seeing messages like the following in my log files: clients-per-query increased to 15 This apply to recursive queries. Don't you have a malware on the network? If not, this is ju

clients-per-query increased to 15

2013-04-09 Thread Dwayne Hottinger
Ive started having some issues with one of my subnets. Im seeing messages like the following in my log files: clients-per-query increased to 15 I did a little googling and found where this is adjustable per the named.conf. I currently dont have anything in my named.conf that outlines this

Re: Question About max-clients-per-query

2011-11-21 Thread Cathy Almond
There's a bit more information about how clients-per-query works in this article here too - and importantly, make sure you're on a current version of BIND to avoid a bug with it (but you'd be updating anyway for CVE-2011-4313?): https://www.isc.org/software/bind/advisories/cve-2

Re: Question About max-clients-per-query

2011-11-18 Thread Fr34k
Hello, Read the BIND ARM (Admin Ref. Manual) about these settings, but here is an example of what I use:     clients-per-query 10 ;     max-clients-per-query 20 ; http://www.isc.org/software/bind/documentation Previously, this resource was posted on this list which is good info to

RE: Question About max-clients-per-query

2011-11-18 Thread Lightner, Jeff
o:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Alan Shackelford Sent: Friday, November 18, 2011 10:32 AM To: bind-users@lists.isc.org Subject: Question About max-clients-per-query I had a situation a couple of days ago where a compromised machine in the DMZ portion of my netw

Question About max-clients-per-query

2011-11-18 Thread Alan Shackelford
I had a situation a couple of days ago where a compromised machine in the DMZ portion of my network began sending an incredible number of queries to a couple of the primary internal DNS servers. The traffic was so intense that legitimate queries were unable to get through, or the customer timed

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Mark Andrews
In message <688460.82562...@web121414.mail.ne1.yahoo.com>, Fr34k writes: > - Original Message > > > From: Mark Andrews > > To: Fr34k > > Cc: Bindlist > > Sent: Wed, March 23, 2011 9:04:00 PM > > Subject: Re: Q on clients-per-query, max-

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Cathy Almond
> > So, does BIND behave the same whether it is a single PC making 100 queries > for > the same record compared to 555 PCs making queries for the same record? > That is, how does BIND treat "clients-per-query, max-clients-per-query" > differently based upon the que

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Fr34k
- Original Message > From: Mark Andrews > To: Fr34k > Cc: Bindlist > Sent: Wed, March 23, 2011 9:04:00 PM > Subject: Re: Q on clients-per-query, max-clients-per-query > > > In message <>, Fr34k writes: > > Hello, > > > > # The ARM

Re: Q on clients-per-query, max-clients-per-query

2011-03-23 Thread Mark Andrews
In message <60834.75625...@web121403.mail.ne1.yahoo.com>, Fr34k writes: > Hello, > > # The ARM says: # > clients-per-query, max-clients-per-query > These set the initial value (minimum) and maximum number of recursive > simultaneous clients for any given query () th

Q on clients-per-query, max-clients-per-query

2011-03-23 Thread Fr34k
Hello, # The ARM says: # clients-per-query, max-clients-per-query These set the initial value (minimum) and maximum number of recursive simultaneous clients for any given query () that the server will accept before dropping additional clients. named will attempt to self tune this value and

Re: clients-per-query message is harmful or not?

2009-12-28 Thread Cathy Almond
MontyRee wrote: > > > So thanks for your kind reply. > > I'm curious the meaning of "given name". > if clients query like below, > > # example.com zone > > abc.example.com/A > www.abc.example.com/A > exmaple.com/MX The above are all different To be 'the same' both the label (e.g. abc

RE: clients-per-query message is harmful or not?

2009-12-28 Thread MontyRee
ueries are much? Thanks in advance. >> >> Hello, all. >> >> my system is centos 4.x, bind 9.5.1-P3 and only recursion is allowed from >> some ranges. >> >> I can see lots of messages like below. >> so if I didn't set any clients-per-query

Re: clients-per-query message is harmful or not?

2009-12-22 Thread Mark Andrews
In message , MontyRee writes: > > Hello, all. > > my system is centos 4.x, bind 9.5.1-P3 and only recursion is allowed from > some ranges. > > I can see lots of messages like below. > so if I didn't set any clients-per-query value,some clients' queries ma

clients-per-query message is harmful or not?

2009-12-22 Thread MontyRee
Hello, all. my system is centos 4.x, bind 9.5.1-P3 and only recursion is allowed from some ranges. I can see lots of messages like below. so if I didn't set any clients-per-query value,some clients' queries may be droppped or not? If some queries can be dropped,I want to set lik

AW: file descriptors and max-clients-per-query

2009-05-27 Thread Philippe Maechler
99, 25140481 security.jail.socket_unixiproute_only: 1 security.jail.allow_raw_sockets: 0 The only limits I set in named.conf is ttl-stuff (lame-ttl, max-ncache-ttl, ...), clients-per-query and recursive-clients If I see the message again I'll let you know. Philippe __

Re: AW: file descriptors and max-clients-per-query

2009-05-26 Thread JINMEI Tatuya / 神明達哉
At Thu, 14 May 2009 17:46:42 +0200, "Philippe Maechler" wrote: > > > I'm running a bind 9.4.2-p2 and a 9.5.1-P1 both on a > > FreeBSD 6.x box > > > as caching servers. > > > let's call them ns1 and ns2 :P > > > > > > short after we shutdown server one we get error messages on > > the other se

AW: file descriptors and max-clients-per-query

2009-05-14 Thread Philippe Maechler
Hello Jeremy > > > > I'm running a bind 9.4.2-p2 and a 9.5.1-P1 both on a > FreeBSD 6.x box > > as caching servers. > > let's call them ns1 and ns2 :P > > > > short after we shutdown server one we get error messages on > the other server > > -> socket: too many open file descriptors > > What

Re: file descriptors and max-clients-per-query

2009-05-14 Thread Jeremy C. Reed
On Thu, 14 May 2009, Philippe Maechler wrote: > Hello Everybody > > I'm running a bind 9.4.2-p2 and a 9.5.1-P1 both on a FreeBSD 6.x box as > caching servers. > let's call them ns1 and ns2 :P > > short after we shutdown server one we get error messages on the other server > -> socket: too many o

file descriptors and max-clients-per-query

2009-05-13 Thread Philippe Maechler
igger" this error? (for testing) something else that bothers me is the message: resolver: clients-per-query increased to 105 how can I find out which clients and/or queries and/or remote servers are responsible for this message? should I do somethin