Re: [pfSense] DNS resolution issues under heavy load

2014-03-25 Thread David Noel
> Short answer: no DOCSIS cable modems are designed for that kind of > throughput! Ugh... I've been suspecting that. > Juniper sells MX480 routers to 10,000-customer-ISPs for ~$250k! > (Granted, that *is* overkill, but even 10k-user corporations will have > fairly high-end routers connected via f

Re: [pfSense] DNS resolution issues under heavy load

2014-03-25 Thread David Noel
SMCD3G On 3/25/14, Ryan Coleman wrote: > I'm perfectly content renting a DOCSIS3 from Comcast and have been doing so > for two years. > > Cost be damned - it's worth it to not have to own it. > > What model do you have? SMC? Nortel? Motorola? > > > On Mar 25

Re: [pfSense] DNS resolution issues under heavy load

2014-03-25 Thread David Noel
not, can anyone recommend a place where I might be able to find an answer to this question? Mailing list? Web forum? IRC channel, even? I'd really rather not have to pull specs on every DOCSIS 3 compatible modem and make a best guess based on microcontrollers/CPUs. Many thanks, -David On 3/1

Re: [pfSense] DNS resolution issues under heavy load

2014-03-20 Thread David Noel
53 would be >> more telling. If you see DNS queries leaving there that get no reply >> back, it's not the firewall. >> >> >>> On Wed, Mar 19, 2014 at 9:50 AM, David Noel >>> wrote: >>> Well, it may not be the ALIX boards after all. I connected

Re: [pfSense] DNS resolution issues under heavy load

2014-03-19 Thread David Noel
than the firewall. Packet capture on WAN filtered on port 53 would be > more telling. If you see DNS queries leaving there that get no reply > back, it's not the firewall. > > > On Wed, Mar 19, 2014 at 9:50 AM, David Noel wrote: >> Well, it may not be the ALIX boards aft

Re: [pfSense] DNS resolution issues under heavy load

2014-03-19 Thread David Noel
Well, it may not be the ALIX boards after all. I connected the servers directly to the modem, ran the crawlers, and I'm still getting UnknownHostException's. I'm guessing my modem's to blame... I'll have to upgrade it and find out. On 3/18/14, David Noel wrote: >