cve-2011-2464 affected the 9.4-ESV-R4-P1?
Hi all, on the ISC website i don't see that the 9.4-ESV-R4-P1 is affected by the CVE-2011-2464 is it because it's not really affected? or it's affected but i don't see it on versions affected because the 9.4-ESV-R4-P1 has it's EOL date to jun2011. Thanks. Issam HARRATHI. IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: bind-users Digest, Vol 902, Issue 1
Thanks for the answer, @ Andreas i made the test and i have the same performance as OS 64 bind 64. NB: when i reach the maximum throughput i still have enough free RAM, free CPU, free NIC capacity. So the limit is in Bind. What to do to reach more capacity? Tests: Test1: OS 64 bit, bind 64 bit == 5 qps Test2: OS 32 bit, bind 32 bit == 7 qps Test3: OS 64 bit, bind 32 bit == 5 qps Regards Issam Harrathi. Message: 7 Date: Wed, 29 Jun 2011 09:16:01 +0200 From: lst_ho...@kwsoft.de Subject: Re: better performance with 32 bit ! why? To: bind-users@lists.isc.org Message-ID: 20110629091601.30282lyntw1u4...@webmail.kwsoft.de Content-Type: text/plain; charset=ISO-8859-1; DelSp=Yes; format=flowed Zitat von Kevin Oberman kob6...@gmail.com: On Tue, Jun 28, 2011 at 7:32 AM, Ryan Novosielski novos...@umdnj.edu wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/28/2011 12:30 PM, David Sparro wrote: On 6/28/2011 11:15 AM, iharrathi@orange-ftgroup.com wrote: Hi all, I'm testing the same version of bind 9.4-ESV-R4-P1 on two server, one is a 32 bit (on which i have a redhat 32 bit) and the second a 64 bit server on which i have a redhat 64 bit. on the 32 bit i reach 7 qps but on the 64 bit i only reach 5 qps (using resperf) and also with tcpreplay. Is it normal that bind when compiled and installed on a 32 bit server have better performance than bind when compiled and installed on a 64 bit server. the only diff?rence between the two server is 64 bit vs 32 bit ( same RAM, same Disk, same NIC,...) and CPU is better on the 64 bit (2 Intel E5310 quad-core 1.6Ghz) than the 32 bit(2 Intel Xeon duad-core 2.33Ghz). Thanks. The 32 bit rig is faster (2.33Ghz). My understanding is that 64-bit is NOT faster in most cases, and only makes some things possible (addressing large amounts of memory is one stand-out) that are not possible with 32-bit. If bind is not going to be using over 4GB of RAM by itself, my understanding is that running 64-bit will merely add overhead. I realize that is a pretty big generalization, so feel free to correct me if you know better. I'll take it a step farther. In my experience running code in 64-bit mode is USUALLY slightly slower than running it in 32-bit mode on the same hardware. This is mostly because of the added data that must be moved for 64-bit operations. It also means the 64-bit binaries are larger, often by a significant amount. I recommend sticking with 32-bit systems unless you have a specific need for 64-bit capacity. My recommendation would be use a 64Bit OS, but 32Bit applications as long as they don't need a large amount of memory. One should not install a 32Bit OS on a server today until it is a embeded device or something similar. Regards Andreas -- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users End of bind-users Digest, Vol 902, Issue 1 ** IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: better performance with 32 bit ! why?
-Message d'origine- De : HARRATHI Issam Ext OLNC/DPS Envoyé : mercredi 29 juin 2011 11:04 À : 'novos...@umdnj.edu'; 'lst_ho...@kwsoft.de'; 'kob6...@gmail.com' Cc : 'bind-users@lists.isc.org' Objet : RE: bind-users Digest, Vol 902, Issue 1 Thanks for the answer, @ Andreas i made the test and i have the same performance as OS 64 bind 64. NB: when i reach the maximum throughput i still have enough free RAM, free CPU, free NIC capacity. So the limit is in Bind. What to do to reach more capacity? Tests: Test1: OS 64 bit, bind 64 bit == 5 qps Test2: OS 32 bit, bind 32 bit == 7 qps Test3: OS 64 bit, bind 32 bit == 5 qps Regards Issam Harrathi. Message: 7 Date: Wed, 29 Jun 2011 09:16:01 +0200 From: lst_ho...@kwsoft.de Subject: Re: better performance with 32 bit ! why? To: bind-users@lists.isc.org Message-ID: 20110629091601.30282lyntw1u4...@webmail.kwsoft.de Content-Type: text/plain; charset=ISO-8859-1; DelSp=Yes; format=flowed Zitat von Kevin Oberman kob6...@gmail.com: On Tue, Jun 28, 2011 at 7:32 AM, Ryan Novosielski novos...@umdnj.edu wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/28/2011 12:30 PM, David Sparro wrote: On 6/28/2011 11:15 AM, iharrathi@orange-ftgroup.com wrote: Hi all, I'm testing the same version of bind 9.4-ESV-R4-P1 on two server, one is a 32 bit (on which i have a redhat 32 bit) and the second a 64 bit server on which i have a redhat 64 bit. on the 32 bit i reach 7 qps but on the 64 bit i only reach 5 qps (using resperf) and also with tcpreplay. Is it normal that bind when compiled and installed on a 32 bit server have better performance than bind when compiled and installed on a 64 bit server. the only diff?rence between the two server is 64 bit vs 32 bit ( same RAM, same Disk, same NIC,...) and CPU is better on the 64 bit (2 Intel E5310 quad-core 1.6Ghz) than the 32 bit(2 Intel Xeon duad-core 2.33Ghz). Thanks. The 32 bit rig is faster (2.33Ghz). My understanding is that 64-bit is NOT faster in most cases, and only makes some things possible (addressing large amounts of memory is one stand-out) that are not possible with 32-bit. If bind is not going to be using over 4GB of RAM by itself, my understanding is that running 64-bit will merely add overhead. I realize that is a pretty big generalization, so feel free to correct me if you know better. I'll take it a step farther. In my experience running code in 64-bit mode is USUALLY slightly slower than running it in 32-bit mode on the same hardware. This is mostly because of the added data that must be moved for 64-bit operations. It also means the 64-bit binaries are larger, often by a significant amount. I recommend sticking with 32-bit systems unless you have a specific need for 64-bit capacity. My recommendation would be use a 64Bit OS, but 32Bit applications as long as they don't need a large amount of memory. One should not install a 32Bit OS on a server today until it is a embeded device or something similar. Regards Andreas -- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users End of bind-users Digest, Vol 902, Issue 1 ** IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit
Re: better performance with 32 bit ! why?
The 64 bit server(server1) is faster than the 32 bit server (server2). Tests: Test1: OS 64 bit, bind 64 bit == 5 qps server1 Test2: OS 32 bit, bind 32 bit == 7 qps server2 Test3: OS 64 bit, bind 32 bit == 5 qps server1 -- Message: 5 Date: Wed, 29 Jun 2011 13:39:43 +0200 From: Matus UHLAR - fantomas uh...@fantomas.sk Subject: Re: bind-users Digest, Vol 902, Issue 1 To: bind-users@lists.isc.org Message-ID: 20110629113943.gb3...@fantomas.sk Content-Type: text/plain; charset=us-ascii; format=flowed On 29.06.11 11:04, iharrathi@orange-ftgroup.com wrote: @ Andreas i made the test and i have the same performance as OS 64 bind 64. NB: when i reach the maximum throughput i still have enough free RAM, free CPU, free NIC capacity. So the limit is in Bind. What to do to reach more capacity? Get faster CPU. Or get a L3 switch and more machines behind it. Tests: Test1: OS 64 bit, bind 64 bit == 5 qps Test2: OS 32 bit, bind 32 bit == 7 qps Test3: OS 64 bit, bind 32 bit == 5 qps Did you try this on the same maching, or are you still using 32-bit OS on machine with faster CPU and 64-bit OS on slower CPU-machine? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. It's now safe to throw off your computer. -- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users End of bind-users Digest, Vol 902, Issue 2 ** IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: better performance with 32 bit ! why?
on server1(64 bit) i have 2 Intel E5310 quad-core 1.6Ghz and on server2(32 bit) i have 2 Intel Xeon dual-core 2.33Ghz. means 8*1.6 Ghz on server1 and 4*2.33 on server2. 8*1.6 is better and faster than 4*2.33, no? Regards Issam Harrathi. The 64 bit server(server1) is faster than the 32 bit server (server2). Really? I thought you said the 64 bit server had a CPU with 1.6GHz cores, and the 32 bit server had 2.33GHz cores? Regards Eivind Olsen IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: better performance with 32 bit ! why?
When i start Bind on server2 i do it with -n 4 ( to use 4 thread) and on server1 i start bind with -n 8. And i see then on munin that the load is shared on all cores. For the load-server it's another server let's call it server 3. I know that tcpreplay is monothread so i lunch 2*25000 qps for example. And i use also resperf for testing, what i have with resperf and tcpreplay is nearly the same. What's important is that i 'm using always the same server3 to load the server1 and server2 (not at the same time, and using the same pcap-- rewrite twice to meet the mac@ of server1 and server2-- ) and i start with -n 4 on the 4 cores server and with -n 8 on the 8 cores. But i found best performance on the 32 bit server2 (4*2.33). Other information i begin the test only after sending for a few minutes 2 qps, so then i have only 5% of request that causes recursion, and about 15% nxdoamin answer, finally 80% of answer from cache. This is available for the 2 server since it's the same original pcap written twice. Do i have to use bind compiled and running on 32 bit server to have better performance rather than bind compiled and running on 64 bit server? and to be more clear this is the last core of the 64 bit server: processor : 7 vendor_id : GenuineIntel cpu family : 6 model : 15 model name : Intel(R) Xeon(R) CPU E5310 @ 1.60GHz stepping: 11 cpu MHz : 1600.058 cache size : 4096 KB physical id : 1 siblings: 4 core id : 3 cpu cores : 4 apicid : 7 fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm syscall lm constant_tsc pni monitor ds_cpl vmx tm2 cx16 xtpr lahf_lm bogomips: 3177.52 clflush size: 64 cache_alignment : 64 address sizes : 38 bits physical, 48 bits virtual power management: and this is the last core of the 32 bit server: processor : 3 vendor_id : GenuineIntel cpu family : 6 model : 15 model name : Intel(R) Xeon(R) CPU5140 @ 2.33GHz stepping: 11 cpu MHz : 2333.389 cache size : 4096 KB physical id : 3 siblings: 2 core id : 7 cpu cores : 2 fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc pni monitor ds_cpl est tm2 xtpr bogomips: 4666.97 Regards. Issam Harrathi Issam Harrathi wrote: on server1(64 bit) i have 2 Intel E5310 quad-core 1.6Ghz and on server2(32 bit) i have 2 Intel Xeon dual-core 2.33Ghz. means 8*1.6 Ghz on server1 and 4*2.33 on server2. 8*1.6 is better and faster than 4*2.33, no? You can only do maths like that if you assume that everything is multithreaded _and_ capable of spreading to multiple cores without any overhead. I've mentioned earlier that for example BIND only scales up to about 4 threads. Based on this, your maths example would be (kind of simplified): 64 bit vs 32 bit: 4*1.6GHz vs 4*2.33GHz Also, you mentioned using tcpreplay, which is also apparantly single-threaded , making the comparison like this: 1*1.6GHz vs 1*2.33GHz. Regards Eivind Olsen IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are
RE: Re: better performance with 32 bit ! why?
As asked, i will made a test with os 32 bit on the same server as the the 64 bit, and will post this result here. Thanks for all for your answers. Regards. Issam Harrathi. De : HARRATHI Issam Ext OLNC/DPS Envoyé : mercredi 29 juin 2011 16:17 À : 's...@whgl.uni-frankfurt.de'; 'Ryan Novosielski'; 'eiv...@aminor.no'; 'dufb...@telia.net'; 'lst_ho...@kwsoft.de' Cc : 'bind-users@lists.isc.org' Objet : Re: better performance with 32 bit ! why? When i start Bind on server2 i do it with -n 4 ( to use 4 thread) and on server1 i start bind with -n 8. And i see then on munin that the load is shared on all cores. For the load-server it's another server let's call it server 3. I know that tcpreplay is monothread so i lunch 2*25000 qps for example. And i use also resperf for testing, what i have with resperf and tcpreplay is nearly the same. What's important is that i 'm using always the same server3 to load the server1 and server2 (not at the same time, and using the same pcap-- rewrite twice to meet the mac@ of server1 and server2-- ) and i start with -n 4 on the 4 cores server and with -n 8 on the 8 cores. But i found best performance on the 32 bit server2 (4*2.33). Other information i begin the test only after sending for a few minutes 2 qps, so then i have only 5% of request that causes recursion, and about 15% nxdoamin answer, finally 80% of answer from cache. This is available for the 2 server since it's the same original pcap written twice. Do i have to use bind compiled and running on 32 bit server to have better performance rather than bind compiled and running on 64 bit server? and to be more clear this is the last core of the 64 bit server: processor : 7 vendor_id : GenuineIntel cpu family : 6 model : 15 model name : Intel(R) Xeon(R) CPU E5310 @ 1.60GHz stepping: 11 cpu MHz : 1600.058 cache size : 4096 KB physical id : 1 siblings: 4 core id : 3 cpu cores : 4 apicid : 7 fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm syscall lm constant_tsc pni monitor ds_cpl vmx tm2 cx16 xtpr lahf_lm bogomips: 3177.52 clflush size: 64 cache_alignment : 64 address sizes : 38 bits physical, 48 bits virtual power management: and this is the last core of the 32 bit server: processor : 3 vendor_id : GenuineIntel cpu family : 6 model : 15 model name : Intel(R) Xeon(R) CPU5140 @ 2.33GHz stepping: 11 cpu MHz : 2333.389 cache size : 4096 KB physical id : 3 siblings: 2 core id : 7 cpu cores : 2 fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 10 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc pni monitor ds_cpl est tm2 xtpr bogomips: 4666.97 Regards. Issam Harrathi Issam Harrathi wrote: on server1(64 bit) i have 2 Intel E5310 quad-core 1.6Ghz and on server2(32 bit) i have 2 Intel Xeon dual-core 2.33Ghz. means 8*1.6 Ghz on server1 and 4*2.33 on server2. 8*1.6 is better and faster than 4*2.33, no? You can only do maths like that if you assume that everything is multithreaded _and_ capable of spreading to multiple cores without any overhead. I've mentioned earlier that for example BIND only scales up to about 4 threads. Based on this, your maths example would be (kind of simplified): 64 bit vs 32 bit: 4*1.6GHz vs 4*2.33GHz Also, you mentioned using tcpreplay, which is also apparantly single-threaded , making the comparison like this: 1*1.6GHz vs 1*2.33GHz. Regards Eivind Olsen IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law.
better performance with 32 bit ! why?
Hi all, I'm testing the same version of bind 9.4-ESV-R4-P1 on two server, one is a 32 bit (on which i have a redhat 32 bit) and the second a 64 bit server on which i have a redhat 64 bit. on the 32 bit i reach 7 qps but on the 64 bit i only reach 5 qps (using resperf) and also with tcpreplay. Is it normal that bind when compiled and installed on a 32 bit server have better performance than bind when compiled and installed on a 64 bit server. the only différence between the two server is 64 bit vs 32 bit ( same RAM, same Disk, same NIC,...) and CPU is better on the 64 bit (2 Intel E5310 quad-core 1.6Ghz) than the 32 bit(2 Intel Xeon duad-core 2.33Ghz). Thanks. IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
where is the bind 9.4-ESV-R4-P1?
Hi, i can't find the version 9.4-ESV-R4-P1 even here: http://ftp.isc.org/isc/bind9/ Last week this version was on the website(http://www.isc.org/downloads/all). why they remove it? I know it's EOL but at least i have to find it here http://ftp.isc.org/isc/bind9/ Thanks Issam HARRATHI IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: forward first: iterative or recursive query
Thanks for the answer but: * In the example i post yesterday: on my server1 the recursion is enabled (recursion yes), but the server1 can't recurse because i stop it on firewall and it can't contact the outside. * You say Don't use forwarding from a recursive server to a non-recursive server but when my server1 is recursive (and the firewall allow it to contact the outside), and server2 don't recurse because in it's conf recursion is set to no, when i ask my server1 about ftp.example.comftp://ftp.example.com (dig @0 ftp.example.comftp://ftp.example.com) , server1 forward the query to server2 which answer by the CNAME www.abc.comhttp://www.abc.com and then server1 recurse to find the IP of www.abc.comhttp://www.abc.com. and everything works fine. * you say If server 2 is auth-only or otherwise can't resolve the address of www.abc.comhttp://www.abc.com/, then forwarding a query to it is not going to work. No as i say when server1 really recurse ( recursion yes, and the firewall allow the server1 to contact outside) and server2 don't recurse (recursion no) all is ok: server1 forward the query to server2 which answer by the CNAME www.abc.comhttp://www.abc.com/ and then server1 recurse to find the IP of www.abc.comhttp://www.abc.com/. and everything works fine. * You say then using a stub zone for example.comhttp://example.com/ will work, why i will use a stub zone since a forward do the same thing expected. And my question is always this: forward only; as i read means a recursive query, in other term a query with the RD bit is enabled. which means that when my server1 (which has recursion yes but can't recurse because the firewall don't allow it to contact the outside, which finally means server1 can't recuse) ask server2 about ftp.example.comftp://ftp.example.com, server2 will normally make all the work means he read on it's zone, then find the CNAME, then make a recursion to resolve the CNAME and finally send the IP to server1. why server2 don't recurse to find the IP of www.abc.com? thanks for your help. De : Chris Buxton [mailto:chris.p.bux...@gmail.com] Envoyé : jeudi 5 mai 2011 19:47 À : HARRATHI Issam Ext OLNC/DPS Cc : bind-users@lists.isc.org Objet : Re: forward first: iterative or recursive query If recursion is disabled, forwarding doesn't happen. I think you've confused some terms and configurations. Don't use forwarding from a recursive server to a non-recursive server. Use a stub zone instead, if you can't rely on the recursion process to find the correct server to query. If server 2 is auth-only or otherwise can't resolve the address of www.abc.comhttp://www.abc.com, then forwarding a query to it is not going to work. However, if server 1 is a caching server and is able to resolve www.abc.comhttp://www.abc.com, then using a stub zone for example.comhttp://example.com will work; server 2 will send the CNAME record to server 1, and then server 1 will resolve the final address record on its own. Chris Buxton BlueCat Networks On May 5, 2011, at 2:15 AM, iharrathi@orange-ftgroup.commailto:iharrathi@orange-ftgroup.com iharrathi@orange-ftgroup.commailto:iharrathi@orange-ftgroup.com wrote: Hi, i have a server called server1 that is acting as a cache server( recursion none). And i forward the zone example.comhttp://example.com to server2 which has recursion enabled and master on some zone like example.comhttp://example.com. this is the forwarding zone on server1: zone example.comhttp://example.com { type forward; forward only; forwarders { IP_of server2; }; }; and server2 is master of the zone example.comhttp://example.com: zone example.comhttp://example.com { type master; file master/db.example.com; }; BUT the problem is here: db.example.comhttp://db.example.com: $ORIGIN example.comhttp://example.com. www A1.2.3.4 ftp CNAME www.abc.comhttp://www.abc.com/ server1 can resolve www.example.comhttp://www.example.com/, but can't resolve ftp.example.comftp://ftp.example.com since the server2 sends the answer which is www.abc.comhttp://www.abc.com/ and not the IP, and my server1 can't make recursion to resolve www.abc.comhttp://www.abc.com/. why? from server1 when i dig on server2: dig @IP-server2 www.example.comhttp://www.example.com/ it sends to me the IP, all is OK!!! but with a forwarding statement it sends only the CNAME server1 is bind9.6-ESV-R4 et server2 bind-9.4.2 Thanks. Issam HARRATHI De : Chris Buxton [mailto:chris.p.bux...@gmail.com] Envoyé : mercredi 4 mai 2011 08:49 À : HARRATHI Issam Ext OLNC/DPS Cc : bind-users@lists.isc.orgmailto:bind-users@lists.isc.org Objet : Re: forward first: iterative or recursive query With a static-stub zone, you would get an iterative query. Forwarding always results in a recursive query. How are you determining
RE: forward first: iterative or recursive query
Hi, i have a server called server1 that is acting as a cache server( recursion none). And i forward the zone example.com to server2 which has recursion enabled and master on some zone like example.com. this is the forwarding zone on server1: zone example.com { type forward; forward only; forwarders { IP_of server2; }; }; and server2 is master of the zone example.com: zone example.com { type master; file master/db.example.com; }; BUT the problem is here: db.example.com: $ORIGIN example.com. www A1.2.3.4 ftp CNAME www.abc.comhttp://www.abc.com server1 can resolve www.example.comhttp://www.example.com, but can't resolve ftp.example.comftp://ftp.example.com since the server2 sends the answer which is www.abc.comhttp://www.abc.com and not the IP, and my server1 can't make recursion to resolve www.abc.comhttp://www.abc.com. why? from server1 when i dig on server2: dig @IP-server2 www.example.comhttp://www.example.com it sends to me the IP, all is OK!!! but with a forwarding statement it sends only the CNAME server1 is bind9.6-ESV-R4 et server2 bind-9.4.2 Thanks. Issam HARRATHI De : Chris Buxton [mailto:chris.p.bux...@gmail.com] Envoyé : mercredi 4 mai 2011 08:49 À : HARRATHI Issam Ext OLNC/DPS Cc : bind-users@lists.isc.org Objet : Re: forward first: iterative or recursive query With a static-stub zone, you would get an iterative query. Forwarding always results in a recursive query. How are you determining that your server is sending an iterative query? Can we (the list) see your named.conf? Regards, Chris Buxton BlueCat Networks On May 3, 2011, at 5:21 AM, iharrathi@orange-ftgroup.commailto:iharrathi@orange-ftgroup.com iharrathi@orange-ftgroup.commailto:iharrathi@orange-ftgroup.com wrote: Hi from the book DNS and Bind 5th edition [french] (o'reilly) I read that the forward with the mode first sends a recursive query to the servers on the forwarders list, but as i see it only sends an iterative query. Also with forward only it send an itérative query. So forward first send an itérative or recursive query? And how i can send a recursive query with the statement forward ( without using static-stub) I'm using bind-9.6-ESV-R4 Thanks. Issam HARRATHI. IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.orgmailto:bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer
forward first: iterative or recursive query
Hi from the book DNS and Bind 5th edition [french] (o'reilly) I read that the forward with the mode first sends a recursive query to the servers on the forwarders list, but as i see it only sends an iterative query. Also with forward only it send an itérative query. So forward first send an itérative or recursive query? And how i can send a recursive query with the statement forward ( without using static-stub) I'm using bind-9.6-ESV-R4 Thanks. Issam HARRATHI. IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
[Bind 9.8.0] RPZ deny ALL
Hi, i want to implement a bind server that only answer query on www.google.comhttp://www.google.com and for the rest answer 127.0.0.17. my solution: www.google.comhttp://www.google.com IN CNAME www.google.comhttp://www.google.com. *.com IN A 127.0.0.17 *.fr IN A 127.0.0.17 *.org IN A 127.0.0.17 *.be IN A 127.0.0.17 *.de IN A 127.0.0.17 *.ca IN A 127.0.0.17 ... offcourse this work but i have to list all the TLD. can I put : .INA127.0.0.17 or something like that to rewrite the root. means my conf became something like that: .INA127.0.0.17 www.google.comhttp://www.google.com/ IN CNAME www.google.comhttp://www.google.com. which is better than listing all the TLD. Thanks. Issam HARRATHI IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: priority with A record?
Thanks Kevin for the answer, But rrset-order, can only disble the round robin (cyclic=round robin | random= random | fixed=disable round robin) And sorlist prioritise basing on IP of the client, i don't see anyway how to send( for example) 75% of http traffic to bigserver1.mysite.com and 25% of traffic to smallserver1.mysite.com And for the SRV which make exacly what i want, it's not supported by browser. May be with bind10 we will have this feature for A record like what we have now for MX! Thanks. Issam HARRATHI Date: Tue, 05 Apr 2011 12:40:22 -0400 From: Kevin Darcy k...@chrysler.com Subject: Re: priority with A record? To: bind-users@lists.isc.org Message-ID: 4d9b45f6.9090...@chrysler.com Content-Type: text/plain; charset=iso-8859-1; Format=flowed On 4/5/2011 8:23 AM, iharrathi@orange-ftgroup.com wrote: Hi, can i make priority on a A or NS record? Since with round robin if i put the same record record 2 or 3 time, Bind ignore the duplicates Records, means this: wikipediaNSns2.wikimedia.org. wikipediaNSns0.wikimedia.org. is the same like this: wikipediaNSns2.wikimedia.org. wikipediaNSns0.wikimedia.org. wikipediaNSns0.wikimedia.org. In this 2 case it will send 50% of traffic to ns2 and 50% to ns0; Is there anyway to enable priority on A or NS record? Thanks. For NS records, there is no way to do this in BIND, and it's completely unnecessary anyway, since every major DNS full-resolver implementation will keep track of how fast nameservers respond -- based on round-trip times, known as RTTs -- and prefer faster-responding nameservers over slower-responding ones. So the load spreads itself automatically, and failures -- which are assessed as really bad performance -- are routed around. For A/ records, there are mechanisms to control the order in which the records are presented. See sortlist and rrset-order (not sure that rrset-order even exists in later versions of BIND, since I've never used it in production). However, these are only practical on tightly-controlled intranets, where all of the BIND-instance configurations can be kept in sync with each other, otherwise one BIND instance may undo the careful address-record ordering that another performs. rrset-order and sortlist are pretty much useless for Internet names, since the vast majority Internet users get their DNS through intermediate resolvers, which will usually randomize or round-robin the responses whenever they are answering from their caches. As another poster pointed out, SRV records provide the capability for the domain owner to implement per-name failover and weighting of targets, in the DNS data itself. But, thusfar the DNS community hasn't had much success getting client-software developers (e.g. browser developers) to adopt SRV record support. Meanwhile, certain network-hardware companies (including among others a certain huge router vendor) rake in big money with their sledgehammer load-balancer device approach to the problem. There are software approaches to network load-balancing as well, but I have no direct experience with those. - Kevin -- next part -- An HTML attachment was scrubbed... URL: https://lists.isc.org/pipermail/bind-users/attachments/20110405/abe4dd37/attachment-0001.html -- IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified,
Maximum limit of query per second
Hi, Is there any limit for bind for handling a big number of qps (query per second). Have some one reach the number 10 qps for example. Of course we suppose that i have a very powerfull server, so the problem will not be the materiel, and do we have to tune BIND (ISC_SOCKET_MAXSOCKET, ISC_SOCKET_MAXEVENTS)? Thanks; Issam HARRATHI IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: priority with A record?
Or, get a DNS balancer that will send balance the IP addresses sorted in random, but weighed order. Note that there are many technical and logicalproblems with DNS balancers. Do you mean that with rrset-order random i can add weight, if yes i don't find any documents that talks about that (nothing in the arm.pdf file) Thanks. Issam HARRATHI IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
priority with A record?
Hi, can i make priority on a A or NS record? Since with round robin if i put the same record record 2 or 3 time, Bind ignore the duplicates Records, means this: wikipedia NS ns2.wikimedia.org. wikipedia NS ns0.wikimedia.org. is the same like this: wikipedia NS ns2.wikimedia.org. wikipedia NS ns0.wikimedia.org. wikipedia NS ns0.wikimedia.org. In this 2 case it will send 50% of traffic to ns2 and 50% to ns0; Is there anyway to enable priority on A or NS record? Thanks. IMPORTANT.Les informations contenues dans ce message electronique y compris les fichiers attaches sont strictement confidentielles et peuvent etre protegees par la loi. Ce message electronique est destine exclusivement au(x) destinataire(s) mentionne(s) ci-dessus. Si vous avez recu ce message par erreur ou s il ne vous est pas destine, veuillez immediatement le signaler a l expediteur et effacer ce message et tous les fichiers eventuellement attaches. Toute lecture, exploitation ou transmission des informations contenues dans ce message est interdite. Tout message electronique est susceptible d alteration. A ce titre, le Groupe France Telecom decline toute responsabilite notamment s il a ete altere, deforme ou falsifie. De meme, il appartient au destinataire de s assurer de l absence de tout virus. IMPORTANT.This e-mail message and any attachments are strictly confidential and may be protected by law. This message is intended only for the named recipient(s) above. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this e-mail message. Any unauthorized view, usage or disclosure ofthis message is prohibited. Since e-mail messages may not be reliable, France Telecom Group shall not be liable for any message if modified, changed or falsified. Additionally the recipient should ensure they are actually virus free. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users