Unsubscribe
From: bind-users <[email protected]> On Behalf Of [email protected] Sent: Wednesday, September 27, 2023 4:02 PM To: [email protected] Subject: [EXTERNAL] bind-users Digest, Vol 4327, Issue 1 Send bind-users mailing list submissions to bind-users@ lists. isc. org To subscribe or unsubscribe via the World Wide Web, visit https: //urldefense. com/v3/__https: //lists. isc. org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$ Send bind-users mailing list submissions to [email protected]<mailto:[email protected]> To subscribe or unsubscribe via the World Wide Web, visit https://urldefense.com/v3/__https://lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$> or, via email, send a message with subject or body 'help' to [email protected]<mailto:[email protected]> You can reach the person managing the list at [email protected]<mailto:[email protected]> When replying, please edit your Subject line so it is more specific than "Re: Contents of bind-users digest..." Today's Topics: 1. Hyperlocal RFC8806 Root Mirror (Silva Carlos) 2. Re: Hyperlocal RFC8806 Root Mirror (Michael Richardson) 3. KSAP - How to manually rollover keys documentation? (Eddie Rowe) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Sep 2023 12:53:54 -0300 From: Silva Carlos <[email protected]<mailto:[email protected]>> To: [email protected]<mailto:[email protected]> Subject: Hyperlocal RFC8806 Root Mirror Message-ID: <cae0cwpqy17ea41h-cnhnz0tu5o8z33fxs0wo+i_5tztaqye...@mail.gmail.com<mailto:cae0cwpqy17ea41h-cnhnz0tu5o8z33fxs0wo+i_5tztaqye...@mail.gmail.com>> Content-Type: text/plain; charset="utf-8" +++++++++++++++++++++++++++++++++++++++++++++++++ Hey guys. I have two recursive servers, bind 9.18 on Debian 12. On server A I configured HyperLocal. On Server B I did NOT configure HyperLocal. I ran the command "dig @localhost EXAMPLES" on both servers. EXAMPLES: blabla.sdf.dd or teste.com.eroterrter or world.nanana Problem: Both Servers report that "Query TIme = 0 ms". I understand that Server A should result in 0ms and Server B should have a non-zero time as Server B does not have a copy of the Root Zone DB. Question: Where am I going wrong? Am I missing some basic principle? I'm following this tutorial: https://urldefense.com/v3/__https://semanacap.bcp.nic.br/files/apresentacao/arquivo/864/Implementacao*20de*20servidores*20recursivos*20guia*20de*20praticas*20semcap*20ceptro*20br.pdf__;JSUlJSUlJSUl!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXwWDW0NG$<https://urldefense.com/v3/__https:/semanacap.bcp.nic.br/files/apresentacao/arquivo/864/Implementacao*20de*20servidores*20recursivos*20guia*20de*20praticas*20semcap*20ceptro*20br.pdf__;JSUlJSUlJSUl!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXwWDW0NG$> Best Regards +++++++++++++++++++++++++++++++++++++++++++++++++ <https://urldefense.com/v3/__https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$<https://urldefense.com/v3/__https:/www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$>> N?o cont?m v?rus.https://urldefense.com/v3/__http://www.avast.com__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7CXzq1D$<https://urldefense.com/v3/__http:/www.avast.com__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7CXzq1D$> <https://urldefense.com/v3/__https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$<https://urldefense.com/v3/__https:/www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$>> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/e250fc52/attachment-0001.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX5em3bOy$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/e250fc52/attachment-0001.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX5em3bOy$>> ------------------------------ Message: 2 Date: Wed, 27 Sep 2023 14:15:43 -0400 From: Michael Richardson <[email protected]<mailto:[email protected]>> To: Silva Carlos <[email protected]<mailto:[email protected]>>, [email protected]<mailto:[email protected]> Subject: Re: Hyperlocal RFC8806 Root Mirror Message-ID: <6839.1695838543@localhost<mailto:6839.1695838543@localhost>> Content-Type: text/plain; charset="us-ascii" Silva Carlos <[email protected]<mailto:[email protected]>> wrote: > On server A I configured HyperLocal. On Server B I did NOT configure > HyperLocal. > I ran the command "dig @localhost EXAMPLES" on both servers. > EXAMPLES: blabla.sdf.dd or teste.com.eroterrter or world.nanana > Problem: Both Servers report that "Query TIme = 0 ms". I understand that > Server A should result in 0ms and Server B should have a non-zero time as > Server B does not have a copy of the Root Zone DB. > Question: Where am I going wrong? Am I missing some basic principle? 1. Server B could have cached the result already. Make sure you start it cold. 2. The query is probably taking between 0ms and 1ms, but rounds down to 0ms. To be sure, you could tcpdump the network on server B. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 511 bytes Desc: not available URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/6dedd376/attachment-0001.sig__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7t0iQ0K$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/6dedd376/attachment-0001.sig__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7t0iQ0K$>> ------------------------------ Message: 3 Date: Wed, 27 Sep 2023 21:02:16 +0000 From: Eddie Rowe <[email protected]<mailto:[email protected]>> To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: KSAP - How to manually rollover keys documentation? Message-ID: <mw5pr22mb3132fcb88583e2a81f12e18aea...@mw5pr22mb3132.namprd22.prod.outlook.com<mailto:mw5pr22mb3132fcb88583e2a81f12e18aea...@mw5pr22mb3132.namprd22.prod.outlook.com>> Content-Type: text/plain; charset="iso-8859-1" I am using the nifty feature of the KASP in 9.16.23, but I cannot seem to locate documentation on how to manually rollover keys in case this is needed in the future. The documentation is excellent as far as discussing the steps involved for the manual or semi-automatic but I am not seeing the steps and tools you would use to rollover manually when using the KASP feature. Am I overlooking another document or KB article on this topic? -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/e1047578/attachment.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy0JBiH4$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/e1047578/attachment.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy0JBiH4$>> ------------------------------ Subject: Digest Footer _______________________________________________ ISC funds the development of this software with paid support subscriptions. Contact us at https://urldefense.com/v3/__https://www.isc.org/contact/__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXyPZ9N7x$<https://urldefense.com/v3/__https:/www.isc.org/contact/__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXyPZ9N7x$> for more information. bind-users mailing list [email protected]<mailto:[email protected]> https://urldefense.com/v3/__https://lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$> ------------------------------ End of bind-users Digest, Vol 4327, Issue 1 *******************************************
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
