Re: about apply Deckard to test BIND named

2022-02-16 Thread Sun Guonian via bind-users
Thank Ondřej for the information ! Best Regards,SUN Guonian On Wednesday, February 16, 2022, 04:05:06 PM GMT+8, Ondřej Surý wrote: Hi Sun, this is impressive effort, but it has several known gotchas: 1. The `named` looks for real interfaces to listen too and it     didn’t play well

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

2022-02-16 Thread Mark Tinka
Hi all. Just coming back to this... I notice that the release notes for 9.16.25 say the memory leak issue on FreeBSD is now fixed: * On FreeBSD, TCP connections leaked a small amount of heap memory, leading to an eventual out-of-memory problem. This has been fixed in:

Re: about apply Deckard to test BIND named

2022-02-16 Thread Petr Špaček
Hi, it is even more complicated: - Latest version of Deckard uses Linux network namespaces and thus makes BIND GL#2088 unnecessary - It does not work anyway because jemalloc library used by libfaketime breaks libfaketime library is used by Deckard for DNSSEC tests. See

Re: about apply Deckard to test BIND named

2022-02-16 Thread Ondřej Surý
I guess you can possibly workaround this by disabling jemalloc from named build and hope that the static shims for jemalloc calls will trump the preloaded functions from libfaketime. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: ipv6 adoption

2022-02-16 Thread Mark Tinka
On 2/16/22 15:49, Reindl Harald wrote: not when you don't use 3rd party repos or build it at your own - the whole point of a stable distibution is to not have random major-upgrades of software and unless you have no very good reason you should either stay at the packages from your

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

2022-02-16 Thread Borja Marcos
> On 16 Feb 2022, at 10:53, Mark Tinka wrote: > > Hi all. > > Just coming back to this... > > I notice that the release notes for 9.16.25 say the memory leak issue on > FreeBSD is now fixed: > > * > > On FreeBSD, TCP connections leaked a small amount of heap memory, leading to > an

Re: ipv6 adoption

2022-02-16 Thread Borja Marcos
> On 16 Feb 2022, at 16:50, Grant Taylor via bind-users > wrote: > > On 2/16/22 7:35 AM, Mark Tinka wrote: >> I was assuming Linux has something similar, where in userland, you have the >> option to install which train of BIND you want, regardless of OS version. > > Most of the -- what I'll

ipv6 adoption

2022-02-16 Thread Andrew Baker via bind-users
Firstly, thanks for the advice about the hidden master the other day, that's now setup, working fine and we've just finished transferring about 4500 records across! My software team came up this morning and slapped me across the face with a wet fish (figuratively speaking as It's not Thursday

Re: ipv6 adoption

2022-02-16 Thread Ondřej Surý
> On 16. 2. 2022, at 14:50, Reindl Harald wrote: > > not when you don't use 3rd party repos or build it at your own - the whole > point of a stable distibution is to not have random major-upgrades of software Technically, using ISC repositories would be 0-party as it’s upstream provider of

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

2022-02-16 Thread Mark Tinka
On 2/16/22 17:15, Borja Marcos wrote: Now I have 9.11.36, 9.16.24 and 9.18.0 What I have noticed with 9.18.0, which is running on the heaviest loaded server, is less memory footprint. I started it on Monday and according to top it’s taking 486 MB (SIZE) - 375 MB (RES). And the memory

Re: ipv6 adoption

2022-02-16 Thread Mark Tinka
On 2/16/22 14:38, Andrew Baker via bind-users wrote: Firstly, we are running bind 9.11 on Debian 10 hosts. * Is it worth use upgrading to Debian 11 to get the newer version of bind? I don't run Linux, but shouldn't it be possible to just upgrade only BIND on your current Linux

Re: ipv6 adoption

2022-02-16 Thread Grant Taylor via bind-users
On 2/16/22 7:35 AM, Mark Tinka wrote: I was assuming Linux has something similar, where in userland, you have the option to install which train of BIND you want, regardless of OS version. Most of the -- what I'll call -- binary distributions of Linux tend to have a fairly small range of any

Re: ipv6 adoption

2022-02-16 Thread Reindl Harald
Am 16.02.22 um 14:25 schrieb Mark Tinka: On 2/16/22 14:38, Andrew Baker via bind-users wrote: Firstly, we are running bind 9.11 on Debian 10 hosts. * Is it worth use upgrading to Debian 11 to get the newer version of bind? I don't run Linux, but shouldn't it be possible to just

Re: ipv6 adoption

2022-02-16 Thread Timothe Litt
On 16-Feb-22 07:38, Andrew Baker wrote: Firstly, thanks for the advice about the hidden master the other day, that’s now setup, working fine and we’ve just finished transferring about 4500 records across! My software team came up this morning and slapped me across the face with a wet fish

Re: ipv6 adoption

2022-02-16 Thread Mark Tinka
On 2/16/22 17:50, Grant Taylor via bind-users wrote: Most of the -- what I'll call -- binary distributions of Linux tend to have a fairly small range of any given versions of software in the repositories provided by the Linux distribution provider. There is nothing that prevents you from

RE: ipv6 adoption

2022-02-16 Thread Mike Lewinski via bind-users
> HE has a lot of IPv6 educational materials (not bind-specific) that are quite > good. I wasn't aware, but this looks worthy and I'm going to do it: https://ipv6.he.net/certification/ Also to the OP here's another +1 that Debian 10 bind version does IPv6 just fine, and +1 upgrade it anyway

Re: about apply Deckard to test BIND named

2022-02-16 Thread Petr Špaček
On 16. 02. 22 10:12, Ondřej Surý wrote: I guess you can possibly workaround this by disabling jemalloc from named build and hope that the static shims for jemalloc calls will trump the preloaded functions from libfaketime. Oh right, I forgot we can also compile BIND without jemalloc - it

Re: ipv6 adoption

2022-02-16 Thread Mark Tinka
On 2/16/22 17:18, Timothe Litt wrote: You can get IPv6 via a tunnel broker.  Hurricane Electric (http://he.net/) is one of the larger ones.  You can get a /48 from them - for free.  Bandwidth is modest.  You can setup reverse zones; they'll delegate.  I don't think they support DNSSEC -

Re: ipv6 adoption

2022-02-16 Thread G.W. Haywood via bind-users
Hi there, On Wed, 16 Feb 2022, Mark Tinka wrote: On 2/16/22 17:18, Timothe Litt wrote: > You can get IPv6 via a tunnel broker.? Hurricane Electric > (http://he.net/) is one of the larger ones.? You can get a /48 from > them - for free.? Bandwidth is modest.? You can setup reverse zones; >

Re: ipv6 adoption

2022-02-16 Thread Mark Andrews
> On 16 Feb 2022, at 23:38, Andrew Baker via bind-users > wrote: > > Firstly, thanks for the advice about the hidden master the other day, that’s > now setup, working fine and we’ve just finished transferring about 4500 > records across! > My software team came up this morning and slapped

Re: ipv6 adoption

2022-02-16 Thread Grant Taylor via bind-users
On 2/16/22 9:24 AM, G.W. Haywood via bind-users wrote: FWIW I've been using DNSSEC with HE slaves since October 2017.  I'm happy to report that I've never had any problem with the service. Please clarify if you are talking about DNSSEC for your own zone that they are doing secondary transfers

RE: ipv6 adoption

2022-02-16 Thread Andrew Baker via bind-users
I'm already using Hurricane for my external slave servers to I will have a dig through their site thanks Andy Baker IT Technical Lead | SIIL Corporate IT Tel: +974-44838733, Direct: +974-44485711| Fax: +974-44838732 Salam International Investments Ltd. Maysaloun Street - West Bay | Salam Plaza

Re: about apply Deckard to test BIND named

2022-02-16 Thread Ondřej Surý
Hi Sun, this is impressive effort, but it has several known gotchas: 1. The `named` looks for real interfaces to listen too and it didn’t play well with Deckard in the past. I’ve been told that this is no longer a problem, but it could be something you should be aware of. See [GL