Re: [Pdns-users] Hidden supermasters

2010-08-06 Thread Michael Fincham
Hi Richard,

On Fri, 2010-08-06 at 15:27 +1000, Richard McLean wrote:
 I have wondered about this. We'd love to implement a hidden supermaster type 
 setup, using AXFR, which auto-updates the 4 main name servers, but is *not* 
 in the list of name servers for a domain and is not publicly available. Is 
 the 
 restriction above able to be worked around or turned off?

I've managed to work around this by adding a config line like:

gsql-supermaster-query=select account from supermasters where ip='%s'

In this setup, only IP addresses need to be listed in the supermasters
table and the other checks are bypassed.

This might need some careful checks if the database schema / the
expected returned field list etc changes at some point in the future.

-- 
-Michael Fincham
System Administrator, Unleash
www.unleash.co.nz

___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users


[Pdns-users] EDNS support + default buffer size

2010-03-17 Thread Michael Fincham
Hi all,

I've just tested the PowerDNS Recursor 3.2 with its out of the box
configuration against the tests outlined at
https://www.dns-oarc.net/oarc/services/replysizetest

It seems that EDNS is disabled by default, which is confirmed by the
comment attached to changeset #1430
(http://wiki.powerdns.com/trac/changeset/1430)

Looking at the source it seems in 3.2 an option disable-edns=no was
added which turns EDNS support on. A cursory test here shows that adding
this to the stock config does cause the dns-oarc reply size test to
report a reply size of 1200 vs 512 when EDNS is off.

What is the status of EDNS support? Is it safe to rely on in production
environments? What specifically does the nothing but trouble comment
on the changeset refer to?

Also, the buffer size of 1200 appears to be hard coded. Is there any
particular reason for this value? I'm guessing it has to do with
avoiding fragmentation, but it'd be nice to know for sure.

Thanks,
-- 
-Michael Fincham
System Administrator, Unleash
www.unleash.co.nz
Phone: 0800 750 250

___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users