measuring dns query

2012-05-09 Thread PFUnix Mail
all, im looking for a way to measure dns queries and am looking for an opensource solution if possible. any suggestions? i want to measure the time it takes for 1DNS query in bind vs. dns Active-Directory integrated. thanks, B ___ Please visit http

Re: DNSSEC

2012-05-09 Thread Barry Margolin
In article , Ben wrote: > If we are using DNSSEC enable with caching resolver, and remote domain > is not DNSSEC enabled so in that case , do we face any problem, means > any failure or something? No. If the domain doesn't have DNSSEC enabled, there's nothing for the resolver to check. --

Re: DNSSEC

2012-05-09 Thread Ben
Hi, How's your experience with DNSSEC while using it with caching dns and authoritative dns ? If we are using DNSSEC enable with caching resolver, and remote domain is not DNSSEC enabled so in that case , do we face any problem, means any failure or something? Regards, Ben Gaurav Kansal

Re: DNSSEC

2012-05-09 Thread Barry Margolin
In article , Tony Finch wrote: > Gaurav Kansal wrote: > > > DNSSEC is done on Authoritative side. > > Signing is done on authority servers. It's straightforward with > inline-signing mode, or if you maintain your zone with dynamic updates. > > > Caching DNS only check whether that particular

RE: DNSSEC

2012-05-09 Thread Tony Finch
Gaurav Kansal wrote: > DNSSEC is done on Authoritative side. Signing is done on authority servers. It's straightforward with inline-signing mode, or if you maintain your zone with dynamic updates. > Caching DNS only check whether that particular domain is signed or not, > only if that caching D

Re: bind caching dns

2012-05-09 Thread Eivind Olsen
Matthew Seaman wrote: > Not to my knowledge. It should be possible to write an agentx plugin > that translates from the XML data provided natively, but you'll have to > write your own MIBs since the standard one from RFC1612 seems to have > received little development since. Indeed RFC3197 > (ht

RE: DNSSEC

2012-05-09 Thread Gaurav Kansal
DNSSEC is done on Authoritative side. Caching DNS only check whether that particular domain is signed or not, only if that caching DNS is designed to do so. As we don't signed our records on fly in DNSSEC, so DNSSEC doesn't increase the load but ya it increases the size of the response of the quer