Re: Possible memory leak on BIND 9.10.1-P1 running on FreeBSD 10.1-RELEASE-p4 - part 2

2015-01-27 Thread J. Thomsen
On Tue, 27 Jan 2015 11:16:04 +0530,Mukund Sivaraman m...@isc.org wrote: Meanwhile, please can you enable statistics-channels in named.conf and send us a dump of the XML statistics along with process sizes reported by ps when named grows very large? I run the small script below every 5 minutes

Re: SPF RR type

2014-06-06 Thread J. Thomsen
On Fri, 06 Jun 2014 09:45:56 +1000,Mark Andrews ma...@isc.org wrote: It takes years to do transitions like this. TXT to SPF was actually ramping up but that is now water under the bridge. In that case named-compilezone should no longer emit found SPF/TXT record but no SPF/SPF record found,

bind 9.10.0 xfer test failing

2014-05-06 Thread J. Thomsen
I am wondering why a particular test of 9.10.0 is failing and how it can be fixed. It happens repeatedly with linux on two different hardware platforms. I:System test result summary: I: 1 FAIL I: 63 PASS I: 4 SKIPPED T:xfer:1:A A:System test xfer I:testing basic zone transfer

Re: What does deleted from unreachable cache mean?

2012-08-03 Thread J. Thomsen
Due to a little too aggressive firewall configuration we had a lot of deleted from unreachable cache messsages in the log, but absolutely no messages logged for the reason for entering the host into the cache, which is much more useful in tracking down the problem. It appears to me, that

Re: big improvement in BIND9 auth-server startup time

2011-08-09 Thread J. Thomsen
On Wed, 03 Aug 2011 15:45:25 -0500,Barry Finkel bsfin...@anl.gov wrote: I did not see any improvement in start-up time. Neither did I at my first test on a primarily slave DNS with raw format zonefiles Next test was on a master and slave with 60K small different zones. The master now

Re: big improvement in BIND9 auth-server startup time

2011-08-09 Thread J. Thomsen
On Tue, 9 Aug 2011 17:18:13 +,Evan Hunt e...@isc.org wrote: The master now loaded about 650 zones/sec. The slave did not change from the usual 120 zones/sec. I'm purely guessing, but I wonder if there's some rate-limiting due to the SOA queries slaves have to send to their masters. You

Re: BIND 9 and IDN

2010-12-16 Thread J. Thomsen
Is there any expertise on implementing Bind and IDN? Our business is wanting to server up DNS for an IDN. I have attempted to add what I believe is needed - but can not do a nslookup or a query from external website for this new domain. Are there any additional steps need to have a IDN?

Re: BIND 9 and IDN

2010-12-16 Thread J. Thomsen
Hall, David, Is there any expertise on implementing Bind and IDN? Our business is wanting to server up DNS for an IDN. I have attempted to add what I believe is needed - but can not do a nslookup or a query from external website for this new domain. Are there any additional steps need to

Re: BIND View Option

2010-11-11 Thread J. Thomsen
If your main concern is resource consumption, maybe you should focus on developing some clever algorithm by which named could keep track of multiple references to the same data, without actually having to make separate copies of the data. Kind of a specialized compression algorithm. But, all

Re: BIND View Option

2010-11-11 Thread J. Thomsen
From a nameserver implementation and maintenance perspective, it's even simpler for the data to already be present in the first view that matches. Why complicate things more than that? Because there is a need for it especially in large installations with a large number of zones. Different

Re: BIND View Option

2010-11-10 Thread J. Thomsen
Is there a way or option to configure bind to do the following logic: If the bind didn’t find a entry in a view 1 (internal view) it will search this entry on the view 2 (external view) ? Not to my knowledge. We had the same problem and ended up with using the hosts file for the special IP

Re: BIND View Option

2010-11-10 Thread J. Thomsen
Not sure why you felt it necessary to resort to hosts files. Well, I don't know how to configure ressource records in an include file and don't want to waste gigabytes of RAM duplicating zones. What am I missing here? The idea of avoiding front ends ! Views in BIND was never meant to

Re: no. of Views and Zones

2010-11-07 Thread J. Thomsen
I'm not sure you quite understand what zones and views are. Why would you not simply create a single zone per customer, and eliminate views altogether? Are you suggesting a single zone with multiple domain names ? I fail to see, how that should be a possible road to follow. The idea, that I

Re: no. of Views and Zones

2010-10-31 Thread J. Thomsen
Alans, Have 2 questions, is there any limitation (beside hardware) on number of views? I mean creating a view/customer? And is there any limitation for number of zones/view? You cannot use views to group zones for customers. I have recently on this list proposed an extension to the view

Re: no. of Views and Zones

2010-10-31 Thread J. Thomsen
Alan Clegg, Can you perhaps explain your need to fragment the DNS namespace (which was NOT supposed to be done)? I cannot speak for Alans, but only for our own needs. We run DNSes for a number of customers i.e. everybody in the whole world should see the same zone data. No different views of

Re: Bind 9.7.2+ Extending views with groups

2010-10-17 Thread J . Thomsen
If you want a zone to be in multiple views, list it in all of them. You are totally missing the point. No zones in multiple views ! I am simply suggesting, that a concept of subdividing views should be introduced. We are having several customers and currently maintaining the zones using

Bind 9.7.2-P2: skipping zone transfer

2010-10-16 Thread J . Thomsen
The handling of large numbers of zone transfers between master and slave is not working well. Having several thousands of zones and a new slave DNS on the same internal network made me change the low defaults to this: master: transfers-out 20; transfers-per-ns 20; slave: transfers-in 20;

Bind 9.7.2+ Extending views with groups

2010-10-16 Thread J . Thomsen
The view facility is apparently only useful for several copies of the same zone and not for grouping zones. If a zone is not present in the first view matching the client, but in another view below, BIND will apparently return a response of zone not found and not use the next matching view.