In message <[email protected]>, Abdulla Bushlaibi writes: > We are facing query drops by using dnsperf tool from ISC testing the DNS > service via load balancer. Multiple queries from the same source port > are being dropped partially by the load balancer and as per the load > balancer vendor feed back, this is a security feature and this situation > doesn't happen in real life scenarios. > > Most of the cases, clients are generating unique random source ports for > each DNS query, however we are not sure about the option of reusing the > same source port for multiple queries and how does it apply in real life > scenarios. > > Appreciate your comment on this subject. > > -- > Abdulla Ahmad Bushlaibi > > _______________________________________________ > bind-users mailing list > [email protected] > https://lists.isc.org/mailman/listinfo/bind-users
A load balancer that cannot cope with multiple outstanding queries that have the same source port is broken. A server (and that includes any load balancer in front of it) should not care about the source port. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
