Re: [bind-users] Slow reply under heavy load (on a specific NIC ip)

2018-06-04 Thread Jerry Kemp

Can you please provide some specifics about your setup that is experiencing the 
problem?

HW - Sparc, PPC, Intel x86/x64, ARM ?

OS - what OS is the problem occurring on?

specific BIND version?

anything about the NIC in question, possibly to include mfg && model number, if 
relevant?

Thanks


On 04/06/18 07:20, Ict Security wrote:

Hi guys,

we are running a Bind 9.x Server, everything is going fine.
Under particular heavy load mometns, with some hundreds of concurrent
queries coming in, sometime Bing stops answering for some seconds or
answer with important delays.

But, when i try to query the same server/same Bind on a NIC alias IP
during congestion on the main IP, everything is fast!

I changed some tunings in:
max-connections in /proc
txqueue in network
ipv4_ports

and i mitigate something.
But it is not completely solved.

Do you think Bind could have some NIC IP limit?
Some ideas?

Really thank you!
Francesco
___

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: [bind-users] dhcp failover is not working as expecte

2018-05-02 Thread Jerry Kemp

Julie,

Not intending to come across as rude, but is this the list you intended to post 
to?

FWIW, you posted to the BIND list, not the DHCPD list.

Good luck,

Jerry


On 02/05/18 19:30, Julie Xu wrote:

Hi,

I have dhcpd running on two servers. Share the load 50%.

I expect if one of the servers has issue, another one will automatically take 
over for all 100% clients.

But, the fact is not. When one of them down, or frozen, half of users had lose 
network without ip address.

My configuration is:
failover peer "primary_secondary" {
 primary;
 address 111.111.111.111;
 peer address 222.222.222.222;
 port 8068;
 peer port 8068;
 max-response-delay 60;
 max-unacked-updates 10;
 mclt 300;
 split 128;
 load balance max seconds 3;
auto-partner-down 0;
 max-lease-misbalance 15;
 max-lease-ownership 10;
 min-balance 60;
 max-balance 3600;
}

Could I get some explanation on why it is happed? And how to avoid it?

Any comments will be appreciated

Thanks in advance

Julie





___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: [bind-users] Re: SOA settings

2018-02-01 Thread Jerry Kemp

dns32 /data/bind 599 # host -t soa rhsoft.net
rhsoft.net has SOA record ns2.thelounge.net. hostmaster.thelounge.net. 
2017123001 3600 1800 1814400 3600


dns32 /data/bind 600 # date
Friday 02 February 2018 01:24 CST


this is what I see, from my location, against rhsoft.net .

Jerry



On 02/02/18 00:48, Reindl Harald wrote:



Am 02.02.2018 um 01:21 schrieb Lyle:

Bind does default to seconds.
However this is not the SOA record.


surely, at least a part of it

@ IN SOA srv-rhsoft.rhsoft.net. admin.rhsoft.net. (
 2017110901  ; Serial
 1800; Refresh
 600 ; Retry
 1814400 ; Expire
 900 ; Negative-TTL
);


On 02/01/18 18:08, lbutlr wrote:

I am looking at a config file and seeing:

2017112100 ; serial
1H ; refresh
15 ; retry
1w ; expire
1H ; minimum

Is that 15 15 seconds?
I'm guess ion it should be 15m?

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Defense against a client?

2012-01-16 Thread Jerry Kemp
I suspect that the NAT/PAT thing is at its peak (across the Internet) right now.

I expect to see it beginning to dissipate in the coming years with the adoption
of IPv6.

Jerry


On 01/16/12 09:13 AM, Chuck Anderson wrote:

 Unfortunately, these sorts of per-IP limiting are going to become more
 and more inappropriate with the likes of Carrier Grade NATs, since
 there will be many subscribers sharing a single public IP address.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Operating system recommendation

2011-03-16 Thread Jerry Kemp
I have ran BIND on Sun/Oracle Solaris since 1994 beginning with Solaris
2.3.  When I started, that was back in the BIND 4.X days.

Solaris has always provided a positive experience for me as a BIND server.

Jerry



 
 On 10-Mar-2011, at 3:52 AM, pollex wrote:
 
 Hi, I want to know in your experience what is the best operating
 system to run bind for an ISP. We currently have Debian for the 5
 Cache servers and for the 2 Authoritative servers.
 We have around 111851 success querys in the cache servers and around
 7267 zones created in the authoritative servers.
 We are doing a major re analysis for all the arquitecture and Debian
 is changing to soon their versions and only have support for 1 version
 before so I dont know if this is best option

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


compiling BIND on AIX

2009-01-21 Thread Jerry Kemp
I have compiled BIND many times on Solaris/OpenSolaris and several 
different *BSD's, and this has always been a pretty simple procedure.


I currently need to compile (a current) BIND on AIX 5.2 and it appears 
to me that there is a little more work involved to get a successful 
compile on this platform vs. others that I have worked with.


Can anyone who is currently compiling/running BIND on AIX share any 
getting started pointers ( i.e. BIND only compiles with gcc, etc)??


A search of the archives indicate that there are people on the list 
running BIND on AIX, but I was unable to uncover any specific tips, 
hints, etc. as to getting a good compile.


TIA,

Jerry K.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


compiling BIND on AIX

2009-01-20 Thread Jerry Kemp
I have compiled BIND many times on Solaris/OpenSolaris and several 
different *BSD's, and this has always been a pretty simple procedure.


I currently need to compile (a current) BIND on AIX 5.2 and it appears 
to me that there is a little more work involved to get a successful 
compile on this platform vs. others that I have worked with.


Can anyone who is currently compiling/running BIND on AIX share any 
getting started pointers ( i.e. BIND only compiles with gcc, etc)??


A search of the archives indicate that there are people on the list 
running BIND on AIX, but I was unable to uncover any specific tips, 
hints, etc. as to getting a good compile.


TIA,

Jerry K.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users