Weird behaviour in wildcard CNAME - is this feature or bug? Can it be changed?

2020-02-11 Thread Petr Bena
Hello, I observed very weird behaviour that I can reproduce on both these BIND9 versions: BIND 9.11.4-P2-RedHat-9.11.4-9.P2.el7 (Extended Support Version) (slave) BIND 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.1 (master) Someone has created a wildcard CNAME: *.prod.app.pcp.cn.prod.     300  

Re: Weird behaviour in wildcard CNAME - is this feature or bug? Can it be changed?

2020-02-11 Thread Petr Bena
But, is this behaviour consistent with other DNS software (microsoft DNS etc.), or is this specific only to BIND9? Is there any standard / documentation that explain how or why is this happening? Because it just doesn't make any sense to me. On 11/02/2020 14:39, Tony Finch wrote: Petr Bena

Re: Weird behaviour in wildcard CNAME - is this feature or bug? Can it be changed?

2020-02-11 Thread Petr Bena
the results, including any intermediate CNAMEs, in the answer section of the response. 6. Using local data only, attempt to add other RRs which may be useful to the additional section of the query. Exit. On 12 Feb 2020, at 00:45, Petr Bena wrote: But, is this beha

Re: Weird behaviour in wildcard CNAME - is this feature or bug? Can it be changed?

2020-02-11 Thread Petr Bena
Oh, that explains it, I didn't know there is such a thing as "empty domain", thanks! On 11/02/2020 16:33, Matus UHLAR - fantomas wrote: On 11.02.20 15:58, Petr Bena wrote: for example test.prod.app.pcp.cn.prod step 2) search the available zones - the zone in question here is p

Chaining NOTIFY and slave servers - is it supported?

2020-04-21 Thread Petr Bena
Hello, In our massive corporate setup with hundreds BIND servers all around planet, we have some "funny" configurations (please don't ask why :)), that seem to be actually working just fine, but I would like to understand if this is actually supported setup, or they just work by accident or

Re: Machine friendly alternative to nsupdate

2020-04-01 Thread Petr Bena
in future versions (that would break my parser), so that's why I am looking for a some alternative to nsupdate, that can achieve the same, but more machine friendly, like a "proper DNS library" you talk about, is there any such a thing? On 01/04/2020 14:35, Tony Finch wrote: Petr Bena

Machine friendly alternative to nsupdate

2020-04-01 Thread Petr Bena
Hello, Some preamble: Some time ago I created an open source DNS admin web GUI *1 that is basically a wrapper around dig and nsupdate that allows people with "less CLI knowledge" to easily manipulate DNS records. The main reason for this was that in our corporation we have about 400 internal

Re: Nsupdate and TTL

2020-04-23 Thread Petr Bena
Hello, From my experience you don't need to delete whole set, I was actually doing this quite recently and discovered and interesting behavior of BIND server - last record you add will override the TTL value for a set. So if you add another NS record to a zone, all existing NS records will

nsupdate: using "wildcard" TTL when removing specific record

2020-06-01 Thread Petr Bena
Hello, Is there any way to tell nsupdate to delete specific record with ANY TTL value? For example I have following record: record.domain.org 3500 A 1.2.3.4 I want to delete exactly that record (A with IP 1.2.3.4), except I don't know what the TTL is, normally, if I knew the TTL, I would do

Re: Interest in a webinar on any of these DNS mgmt tools?

2020-06-04 Thread Petr Bena
Hello Victoria, I'd like to also make you aware of a tool I made, although I am not sure if it fits into this category, because it (on purpose) doesn't directly edit the zone files - it performs all changes to zone files via nsupdate. But it adds a graphical user interface + API. That makes

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-25 Thread Petr Bena
Hello, It works just fine to me, so I guess it's a problem on your end? Try using wget instead of firefox, or different browser. On 25/05/2021 16:44, Erich Eckner wrote: On Tue, 25 May 2021, Ondřej Surý wrote: > Hi, Hi Ondrej, > we merged a change that substantially reduces a contention

BIND benchmark tool

2021-09-27 Thread Petr Bena
Hello, Is there any open source tool that benchmarks the DNS server? Sends pre-defined amount of queries, in parallel to specified DNS servers and calculates the results, with average response time, error count, time out count etc. Something like FIO for IO devices, but for DNS?

Re: BIND benchmark tool

2021-09-27 Thread Petr Bena
That's what I needed - thanks :) On 27/09/2021 12:50, Marc wrote: dnsperf -f inet -t 10 -s 192.168.10.235 -d files.tst -l 30 Queries sent: 451753 Queries completed:451753 (100.00%) Queries lost: 0 (0.00%) Response codes: NOERROR 451753 (100.00%)