[Pdns-users] PowerDNS Free DNSSEC advice for SIDN (.nl) Registrars
Dear PowerDNS users, Currently, many large Dutch registrars are either pondering or already mass signing their domains for DNSSEC use. A quite spectacular graph of this can be seen at http://xs.powerdns.com/dnssec-nl-graph/ . DNSSEC is a complicated protocol, and big DNS migrations were not simple even with plain DNS . It is therefore that together with SIDN (the Dutch registry), PowerDNS is extending a time limited offer of free PowerDNS configuration advice migration assistance to accredited SIDN registrars that are doing large DNSSEC rollouts (please read important (*) remark below!). This means for example that if you share details of your setup with us privately, we can warn you of common pitfalls, or tell you where there is room for improvement. Since we have assisted several large DNSSEC rollouts already, totalling 250k+ domains, by now we are well aware of the best current practices. DNSSEC is at a critical stage, and we want to make sure that PowerDNS DNSSEC get off the ground correctly in our home country! Some more information (for now in Dutch only) can be found on http://dnssec.nl/cases/powerdns-en-dnssec-aandachtspunten-en-ondersteuning.html To benefit from our offer of free advice assistance, please contact us on powerdns.supp...@netherlabs.nl. It should be clarified that this offer comes from PowerDNS, and is not a promise by SIDN! Kind regards, Bert Hubert (*) This is a 'best effort' offer, where we can't guarantee that we will be able to help everybody (nor immediately) with all their problems. There are no guarantees, and if our commercially supported users have issues, we will help them first. This offer is extended 'for now', and if we feel that DNSSEC has been deployed sufficiently, the offer ends. -- PowerDNS Website: http://www.powerdns.com/ PowerDNS Community Website: http://wiki.powerdns.com/ PowerDNS is supported and developed by Netherlabs: http://www.netherlabs.nl ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] PowerDNS Free DNSSEC advice for SIDN (.nl) Registrars
On Fri, Jul 6, 2012 at 8:09 AM, bert hubert bert.hub...@netherlabs.nl wrote: [...] registry), PowerDNS is extending a time limited offer of free PowerDNS configuration advice migration assistance to accredited SIDN registrars that are doing large DNSSEC rollouts (please read important (*) remark below!). This means for example that if you share details of your setup with us privately, we can warn you of common pitfalls, or tell you where there is room for improvement. Since we have assisted several large DNSSEC rollouts already, totalling 250k+ domains, by now we are well aware of the best current practices. I welcome this message but reminds me of mentioning that if there's a gathered wisdom about common pitfalls and usual possible improvements it may be useful to share these as most of us are not dutch root registrars. ;-) best wishes for all rollers-out :), grin ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
[Pdns-users] PowerDNS + LUA + DNSSEC
Good morning, I would like to know if someone has been able to make a proper script lua handling DNSSEC or if preresolve truly support this type of requests. I have already done some scripts with PowerDNS+LUA but now I probably have to add DNSSEC in the picture. Using pdns-recursor-3.3.1+ lua-5.1.4 in a RHEL5 server. Thanks for your help. Yohandry CUETO ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
[Pdns-users] PowerDNS + LUA + DNSSEC
Good morning, I would like to know if someone has been able to make a proper script lua handling DNSSEC or if preresolve truly support this type of requests. I have already done some scripts with PowerDNS+LUA but now I probably have to add DNSSEC in the picture. Using pdns-recursor-3.3.1+ lua-5.1.4 in a RHEL5 server. Thanks for your help. Yohandry CUETO ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
[Pdns-users] PowerDNS and DNSSEC
I all, I've test DNS packet size with my pdns-resursor and it seems that I cannot get packet size over 512bytes. :~# dig +short rs.dns-oarc.net txt rst.x476.rs.dns-oarc.net. rst.x485.x476.rs.dns-oarc.net. rst.x490.x485.x476.rs.dns-oarc.net. Tested at 2010-01-25 14:29:42 UTC 92.103.108.34 lacks EDNS, defaults to 512 92.103.108.34 DNS reply size limit is at least 490 It seems that the DNSSEC version of pdns is in developpement but what is the planning for this release? What is the impact on pdns-recursor with the migration of the G root server with the dnssec protocol? Kind regards Michael ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] PowerDNS and DNSSEC
On Mon, Jan 25, 2010 at 03:35:59PM +0100, Michael FROMENT wrote: I've test DNS packet size with my pdns-resursor and it seems that I cannot get packet size over 512bytes. (...) The PowerDNS Recursor can do 512 packets over TCP/IP fine. Outside of DNSSEC, 512 byte packets are exceedingly rare. What is the impact on pdns-recursor with the migration of the G root server with the dnssec protocol? There is no impact, as the PowerDNS Recursor does not request DNSSEC records from servers. Although 'PowerDNSSEC' is still scheduled to be happening soon, this is an authoritative only solution. DNSSEC support for the PowerDNS Recursor is still a bit further away. Bert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
