R: Operating system recommendation

2011-03-11 Thread Chiesa Stefano
 

-Messaggio originale-
Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
[mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
pollex
Inviato: mercoledì 9 marzo 2011 20.52
A: comp-protocols-dns-b...@isc.org
Oggetto: Operating system recommendation

Hi, I want to know in your experience what is the best operating
system to run bind for an ISP. We currently have Debian for the 5
Cache servers and for the 2 Authoritative servers.
We have around 111851 success querys in the cache servers and around
7267 zones created in the authoritative servers.
We are doing a major re analysis for all the arquitecture and Debian
is changing to soon their versions and only have support for 1 version
before so I dont know if this is best option

Best regards and thanks
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Hello.
The italian Registration Authorithy, that manages more than 2 millions .it 
domains, runs theirs BIND dns server on UBUNTU.

For futher info you can try to contact them at their email addresses:

i...@registro.it
hostmas...@registro.it

http://www.nic.it/?set_language=en

Hope this help.

Ciao.
Stefano.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: R: Operating system recommendation

2011-03-11 Thread fddi

bind performances are excellent also on FreeBSD and OpenBSD.
Myself if I were a big ISP I would use OpenBSD, mainly for a security 
point of view.



Riccardo


On 3/11/11 9:23 AM, Chiesa Stefano wrote:



-Messaggio originale-
Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
[mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
pollex
Inviato: mercoledì 9 marzo 2011 20.52
A: comp-protocols-dns-b...@isc.org
Oggetto: Operating system recommendation

Hi, I want to know in your experience what is the best operating
system to run bind for an ISP. We currently have Debian for the 5
Cache servers and for the 2 Authoritative servers.
We have around 111851 success querys in the cache servers and around
7267 zones created in the authoritative servers.
We are doing a major re analysis for all the arquitecture and Debian
is changing to soon their versions and only have support for 1 version
before so I dont know if this is best option

Best regards and thanks
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Hello.
The italian Registration Authorithy, that manages more than 2 millions .it 
domains, runs theirs BIND dns server on UBUNTU.

For futher info you can try to contact them at their email addresses:

i...@registro.it
hostmas...@registro.it

http://www.nic.it/?set_language=en

Hope this help.

Ciao.
Stefano.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: R: Operating system recommendation

2011-03-11 Thread Lightner, Jeff
"Linux people and their reinstalls"?!

Somebody has confused Linux with Windows.  We've been running RedHat 
Eneterprise Linux (RHEL) systems commercially for several years (including our 
DNS servers) and the only time I "reinstall" is when I'm redeploying a system 
and/or want to go to a newer major release.   As the prior poster said RedHat 
is still supports RHEL4 (7 years or more) and RHEL5 (4 years or more) and has 
now relased RHEL6.

Redeployments don't require a reinstall - I simply do it (as I did for UNIX 
system) to get rid of the cruft that is invariably left behind by redeployments 
and in box upgrades from one major release to another.   I'd do the same on BSD 
if I were still running any of those systems. 

Don't confuse hobbyists who like to tinker and reinstall at the drop of a hat 
to undo their latest experiments with use of Linux in real data centers. 

-Original Message-
From: bind-users-bounces+jlightner=water@lists.isc.org 
[mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of fddi
Sent: Friday, March 11, 2011 4:18 AM
To: bind-users@lists.isc.org
Subject: Re: R: Operating system recommendation

bind performances are excellent also on FreeBSD and OpenBSD.
Myself if I were a big ISP I would use OpenBSD, mainly for a security 
point of view.


Riccardo


On 3/11/11 9:23 AM, Chiesa Stefano wrote:
>
>
> -Messaggio originale-
> Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
> [mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
> pollex
> Inviato: mercoledì 9 marzo 2011 20.52
> A: comp-protocols-dns-b...@isc.org
> Oggetto: Operating system recommendation
>
> Hi, I want to know in your experience what is the best operating
> system to run bind for an ISP. We currently have Debian for the 5
> Cache servers and for the 2 Authoritative servers.
> We have around 111851 success querys in the cache servers and around
> 7267 zones created in the authoritative servers.
> We are doing a major re analysis for all the arquitecture and Debian
> is changing to soon their versions and only have support for 1 version
> before so I dont know if this is best option
>
> Best regards and thanks
> ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
>
> Hello.
> The italian Registration Authorithy, that manages more than 2 millions .it 
> domains, runs theirs BIND dns server on UBUNTU.
>
> For futher info you can try to contact them at their email addresses:
>
> i...@registro.it
> hostmas...@registro.it
>
> http://www.nic.it/?set_language=en
>
> Hope this help.
>
> Ciao.
> Stefano.
> ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
 
Proud partner. Susan G. Komen for the Cure.
 
Please consider our environment before printing this e-mail or attachments.
--
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential 
information and is for the sole use of the intended recipient(s). If you are 
not the intended recipient, any disclosure, copying, distribution, or use of 
the contents of this information is prohibited and may be unlawful. If you have 
received this electronic transmission in error, please reply immediately to the 
sender that you have received the message in error, and delete it. Thank you.
--
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dots in hostnames problem

2011-03-11 Thread John Wobus

On Mar 10, 2011, at 4:24 PM, Matt Rae wrote:

Thanks guys, sounds like a solution would be to transfer the zone
files outside of bind. I'll give some of the suggestions a try.

Matt


I can't help but be curious.  What problem would be solved by
transferring the zone files outside of bind?

John



On Wed, Mar 9, 2011 at 1:01 PM, John Wobus  wrote:

On Mar 9, 2011, at 1:09 PM, Matt Rae wrote:


Hi, I'm working on setting up a slave dns server. Dots have
historically been used in the hostnames here. The dots cause the
resulting zone file from a zone transfer to have $ORIGIN  
automatically

set assuming the dots are indicating a subdomain.

Here's an example of what's happening:

master zone file:

$ORIGIN example.com.
host1.set1Ax.x.x.x
host2.set1Ax.x.x.x
host3.set1Ax.x.x.x

slave's zone file after axfr:

$ORIGIN set1.example.com.
host1   Ax.x.x.x
host2   Ax.x.x.x
host3   Ax.x.x.x

Is there a way to have it not change the ORIGIN and assume the dots
are a subdomain?


I bet you can't change that, but it doesn't
matter to Bind or the DNS.  The two files
mean the same thing.  ORIGIN doesn't
"assume" anything about subdomains: it's
just a convenience for abbreviating the
file.

If you need a consistent format for
some purpose, you could use the output
of named-compilezone.

John

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users



___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dots in hostnames problem

2011-03-11 Thread Phil Mayers

On 11/03/11 15:53, John Wobus wrote:

On Mar 10, 2011, at 4:24 PM, Matt Rae wrote:

Thanks guys, sounds like a solution would be to transfer the zone
files outside of bind. I'll give some of the suggestions a try.

Matt


I can't help but be curious. What problem would be solved by
transferring the zone files outside of bind?


Using:

dig @server zone axfr

...gives you a "raw" zone, suitable for parsing by simple scripts e.g. 
awk/sed/grep - the output omits any of the $ORIGIN or other bind zone 
macros, and has fully-qualified names and data in all fields.


Similar effect as named-compilezone
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: R: Operating system recommendation

2011-03-11 Thread Dan


Simply what I meant by "their reinstall" is going to a new major revision
or someone rootkitted your box. Either would not pose a problem on 
freebsd.


I have redeployed RHEL systems as well and it required a reinstall, the 
upgrade left to many unstabilites in the system, not just the "cruft"

you suggest.

Its clear from that statement you don't run any BSD's and cost your 
company money running RHEL vs Centos or anything free that a competent 
admin could run just as well, perhaps the bit of money your company 
could save you could use towards a ploy for a raise!



Dan.



On Fri, 11 Mar 2011, Lightner, Jeff wrote:


"Linux people and their reinstalls"?!

Somebody has confused Linux with Windows.  We've been running RedHat Eneterprise Linux 
(RHEL) systems commercially for several years (including our DNS servers) and the only 
time I "reinstall" is when I'm redeploying a system and/or want to go to a 
newer major release.   As the prior poster said RedHat is still supports RHEL4 (7 years 
or more) and RHEL5 (4 years or more) and has now relased RHEL6.

Redeployments don't require a reinstall - I simply do it (as I did for UNIX 
system) to get rid of the cruft that is invariably left behind by redeployments 
and in box upgrades from one major release to another.   I'd do the same on BSD 
if I were still running any of those systems.

Don't confuse hobbyists who like to tinker and reinstall at the drop of a hat 
to undo their latest experiments with use of Linux in real data centers.

-Original Message-
From: bind-users-bounces+jlightner=water@lists.isc.org 
[mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of fddi
Sent: Friday, March 11, 2011 4:18 AM
To: bind-users@lists.isc.org
Subject: Re: R: Operating system recommendation

bind performances are excellent also on FreeBSD and OpenBSD.
Myself if I were a big ISP I would use OpenBSD, mainly for a security
point of view.


Riccardo


On 3/11/11 9:23 AM, Chiesa Stefano wrote:



-Messaggio originale-
Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
[mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
pollex
Inviato: mercoledì 9 marzo 2011 20.52
A: comp-protocols-dns-b...@isc.org
Oggetto: Operating system recommendation

Hi, I want to know in your experience what is the best operating
system to run bind for an ISP. We currently have Debian for the 5
Cache servers and for the 2 Authoritative servers.
We have around 111851 success querys in the cache servers and around
7267 zones created in the authoritative servers.
We are doing a major re analysis for all the arquitecture and Debian
is changing to soon their versions and only have support for 1 version
before so I dont know if this is best option

Best regards and thanks
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Hello.
The italian Registration Authorithy, that manages more than 2 millions .it 
domains, runs theirs BIND dns server on UBUNTU.

For futher info you can try to contact them at their email addresses:

i...@registro.it
hostmas...@registro.it

http://www.nic.it/?set_language=en

Hope this help.

Ciao.
Stefano.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Proud partner. Susan G. Komen for the Cure.

Please consider our environment before printing this e-mail or attachments.
--
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential 
information and is for the sole use of the intended recipient(s). If you are 
not the intended recipient, any disclosure, copying, distribution, or use of 
the contents of this information is prohibited and may be unlawful. If you have 
received this electronic transmission in error, please reply immediately to the 
sender that you have received the message in error, and delete it. Thank you.
--
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

RE: R: Operating system recommendation

2011-03-11 Thread Dan



I'm going to end discussion here Jeff as no "personal attacks" were made, 
only possible suggestions to help you and possibly try something new and 
exciting in your life, this becomming more of an OS war than anything 
useful to Bind mailing list, so its more suited for another forum.



Dan.


On Fri, 11 Mar 2011, Lightner, Jeff wrote:


I didn't make this a personal attack so don't know why you felt it necessary to 
go that route.  However, since you did, it is clear from your comments you are 
BSD fan boy and will say whatever you can, including outright fabrications to 
make your position seem more valid than those of others.   I've not seen an OS 
yet that couldn't be rootkitted and implying that RHEL is some how more 
susceptible to that and that BSD is somehow immune to that is completely 
disingenuous.

Many organizations choose to use commercial variants of Linux specifically 
because they prefer to have an external support entity available.   If you had 
to reinstall RHEL to perform a simple upgrade that says more about your lack of 
experience with the platform than it does with the platform itself.  In my 20 
years of Systems Administration experience I've often made suggestions some 
heeded and some ignored but always knew I wasn't the tail that wags the dog.   
You apparently think you are in your organization so congrats on that.

-Original Message-
From: Dan [mailto:d...@sunsaturn.com]
Sent: Friday, March 11, 2011 12:33 PM
To: Lightner, Jeff
Cc: bind-users@lists.isc.org
Subject: RE: R: Operating system recommendation


Simply what I meant by "their reinstall" is going to a new major revision
or someone rootkitted your box. Either would not pose a problem on
freebsd.

I have redeployed RHEL systems as well and it required a reinstall, the
upgrade left to many unstabilites in the system, not just the "cruft"
you suggest.

Its clear from that statement you don't run any BSD's and cost your
company money running RHEL vs Centos or anything free that a competent
admin could run just as well, perhaps the bit of money your company
could save you could use towards a ploy for a raise!


Dan.



On Fri, 11 Mar 2011, Lightner, Jeff wrote:


"Linux people and their reinstalls"?!

Somebody has confused Linux with Windows.  We've been running RedHat Eneterprise Linux 
(RHEL) systems commercially for several years (including our DNS servers) and the only 
time I "reinstall" is when I'm redeploying a system and/or want to go to a 
newer major release.   As the prior poster said RedHat is still supports RHEL4 (7 years 
or more) and RHEL5 (4 years or more) and has now relased RHEL6.

Redeployments don't require a reinstall - I simply do it (as I did for UNIX 
system) to get rid of the cruft that is invariably left behind by redeployments 
and in box upgrades from one major release to another.   I'd do the same on BSD 
if I were still running any of those systems.

Don't confuse hobbyists who like to tinker and reinstall at the drop of a hat 
to undo their latest experiments with use of Linux in real data centers.

-Original Message-
From: bind-users-bounces+jlightner=water@lists.isc.org 
[mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of fddi
Sent: Friday, March 11, 2011 4:18 AM
To: bind-users@lists.isc.org
Subject: Re: R: Operating system recommendation

bind performances are excellent also on FreeBSD and OpenBSD.
Myself if I were a big ISP I would use OpenBSD, mainly for a security
point of view.


Riccardo


On 3/11/11 9:23 AM, Chiesa Stefano wrote:



-Messaggio originale-
Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
[mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
pollex
Inviato: mercoledì 9 marzo 2011 20.52
A: comp-protocols-dns-b...@isc.org
Oggetto: Operating system recommendation

Hi, I want to know in your experience what is the best operating
system to run bind for an ISP. We currently have Debian for the 5
Cache servers and for the 2 Authoritative servers.
We have around 111851 success querys in the cache servers and around
7267 zones created in the authoritative servers.
We are doing a major re analysis for all the arquitecture and Debian
is changing to soon their versions and only have support for 1 version
before so I dont know if this is best option

Best regards and thanks
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Hello.
The italian Registration Authorithy, that manages more than 2 millions .it 
domains, runs theirs BIND dns server on UBUNTU.

For futher info you can try to contact them at their email addresses:

i...@registro.it
hostmas...@registro.it

http://www.nic.it/?set_language=en

Hope this help.

Ciao.
Stefano.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users



RE: R: Operating system recommendation

2011-03-11 Thread Lightner, Jeff
I didn't make this a personal attack so don't know why you felt it necessary to 
go that route.  However, since you did, it is clear from your comments you are 
BSD fan boy and will say whatever you can, including outright fabrications to 
make your position seem more valid than those of others.   I've not seen an OS 
yet that couldn't be rootkitted and implying that RHEL is some how more 
susceptible to that and that BSD is somehow immune to that is completely 
disingenuous.

Many organizations choose to use commercial variants of Linux specifically 
because they prefer to have an external support entity available.   If you had 
to reinstall RHEL to perform a simple upgrade that says more about your lack of 
experience with the platform than it does with the platform itself.  In my 20 
years of Systems Administration experience I've often made suggestions some 
heeded and some ignored but always knew I wasn't the tail that wags the dog.   
You apparently think you are in your organization so congrats on that.

-Original Message-
From: Dan [mailto:d...@sunsaturn.com] 
Sent: Friday, March 11, 2011 12:33 PM
To: Lightner, Jeff
Cc: bind-users@lists.isc.org
Subject: RE: R: Operating system recommendation


Simply what I meant by "their reinstall" is going to a new major revision
or someone rootkitted your box. Either would not pose a problem on 
freebsd.

I have redeployed RHEL systems as well and it required a reinstall, the 
upgrade left to many unstabilites in the system, not just the "cruft"
you suggest.

Its clear from that statement you don't run any BSD's and cost your 
company money running RHEL vs Centos or anything free that a competent 
admin could run just as well, perhaps the bit of money your company 
could save you could use towards a ploy for a raise!


Dan.



On Fri, 11 Mar 2011, Lightner, Jeff wrote:

> "Linux people and their reinstalls"?!
>
> Somebody has confused Linux with Windows.  We've been running RedHat 
> Eneterprise Linux (RHEL) systems commercially for several years (including 
> our DNS servers) and the only time I "reinstall" is when I'm redeploying a 
> system and/or want to go to a newer major release.   As the prior poster said 
> RedHat is still supports RHEL4 (7 years or more) and RHEL5 (4 years or more) 
> and has now relased RHEL6.
>
> Redeployments don't require a reinstall - I simply do it (as I did for UNIX 
> system) to get rid of the cruft that is invariably left behind by 
> redeployments and in box upgrades from one major release to another.   I'd do 
> the same on BSD if I were still running any of those systems.
>
> Don't confuse hobbyists who like to tinker and reinstall at the drop of a hat 
> to undo their latest experiments with use of Linux in real data centers.
>
> -Original Message-
> From: bind-users-bounces+jlightner=water@lists.isc.org 
> [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of 
> fddi
> Sent: Friday, March 11, 2011 4:18 AM
> To: bind-users@lists.isc.org
> Subject: Re: R: Operating system recommendation
>
> bind performances are excellent also on FreeBSD and OpenBSD.
> Myself if I were a big ISP I would use OpenBSD, mainly for a security
> point of view.
>
>
> Riccardo
>
>
> On 3/11/11 9:23 AM, Chiesa Stefano wrote:
>>
>>
>> -Messaggio originale-
>> Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org 
>> [mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org] Per conto di 
>> pollex
>> Inviato: mercoledì 9 marzo 2011 20.52
>> A: comp-protocols-dns-b...@isc.org
>> Oggetto: Operating system recommendation
>>
>> Hi, I want to know in your experience what is the best operating
>> system to run bind for an ISP. We currently have Debian for the 5
>> Cache servers and for the 2 Authoritative servers.
>> We have around 111851 success querys in the cache servers and around
>> 7267 zones created in the authoritative servers.
>> We are doing a major re analysis for all the arquitecture and Debian
>> is changing to soon their versions and only have support for 1 version
>> before so I dont know if this is best option
>>
>> Best regards and thanks
>> ___
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>>
>>
>> Hello.
>> The italian Registration Authorithy, that manages more than 2 millions .it 
>> domains, runs theirs BIND dns server on UBUNTU.
>>
>> For futher info you can try to contact them at their email addresses:
>>
>> i...@registro.it
>> hostmas...@registro.it
>>
>> http://www.nic.it/?set_language=en
>>
>> Hope this help.
>>
>> Ciao.
>> Stefano.
>> ___
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>
> ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
> Proud partner. Susan 

Re: R: Operating system recommendation

2011-03-11 Thread Mahlory Usman Ambrosio NCS
Lp

Best regards.

On Mar 12, 2011, at 2:30 AM, "Lightner, Jeff"   
wrote:

> I didn't make this a personal attack so don't know why you felt it  
> necessary to go that route.  However, since you did, it is clear  
> from your comments you are BSD fan boy and will say whatever you  
> can, including outright fabrications to make your position seem more  
> valid than those of others.   I've not seen an OS yet that couldn't  
> be rootkitted and implying that RHEL is some how more susceptible to  
> that and that BSD is somehow immune to that is completely  
> disingenuous.
>
> Many organizations choose to use commercial variants of Linux  
> specifically because they prefer to have an external support entity  
> available.   If you had to reinstall RHEL to perform a simple  
> upgrade that says more about your lack of experience with the  
> platform than it does with the platform itself.  In my 20 years of  
> Systems Administration experience I've often made suggestions some  
> heeded and some ignored but always knew I wasn't the tail that wags  
> the dog.   You apparently think you are in your organization so  
> congrats on that.
>
> -Original Message-
> From: Dan [mailto:d...@sunsaturn.com]
> Sent: Friday, March 11, 2011 12:33 PM
> To: Lightner, Jeff
> Cc: bind-users@lists.isc.org
> Subject: RE: R: Operating system recommendation
>
>
> Simply what I meant by "their reinstall" is going to a new major  
> revision
> or someone rootkitted your box. Either would not pose a problem on
> freebsd.
>
> I have redeployed RHEL systems as well and it required a reinstall,  
> the
> upgrade left to many unstabilites in the system, not just the "cruft"
> you suggest.
>
> Its clear from that statement you don't run any BSD's and cost your
> company money running RHEL vs Centos or anything free that a competent
> admin could run just as well, perhaps the bit of money your company
> could save you could use towards a ploy for a raise!
>
>
> Dan.
>
>
>
> On Fri, 11 Mar 2011, Lightner, Jeff wrote:
>
>> "Linux people and their reinstalls"?!
>>
>> Somebody has confused Linux with Windows.  We've been running  
>> RedHat Eneterprise Linux (RHEL) systems commercially for several  
>> years (including our DNS servers) and the only time I "reinstall"  
>> is when I'm redeploying a system and/or want to go to a newer major  
>> release.   As the prior poster said RedHat is still supports RHEL4  
>> (7 years or more) and RHEL5 (4 years or more) and has now relased  
>> RHEL6.
>>
>> Redeployments don't require a reinstall - I simply do it (as I did  
>> for UNIX system) to get rid of the cruft that is invariably left  
>> behind by redeployments and in box upgrades from one major release  
>> to another.   I'd do the same on BSD if I were still running any of  
>> those systems.
>>
>> Don't confuse hobbyists who like to tinker and reinstall at the  
>> drop of a hat to undo their latest experiments with use of Linux in  
>> real data centers.
>>
>> -Original Message-
>> From: bind-users-bounces+jlightner=water@lists.isc.org  
>> [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On  
>> Behalf Of fddi
>> Sent: Friday, March 11, 2011 4:18 AM
>> To: bind-users@lists.isc.org
>> Subject: Re: R: Operating system recommendation
>>
>> bind performances are excellent also on FreeBSD and OpenBSD.
>> Myself if I were a big ISP I would use OpenBSD, mainly for a security
>> point of view.
>>
>>
>> Riccardo
>>
>>
>> On 3/11/11 9:23 AM, Chiesa Stefano wrote:
>>>
>>>
>>> -Messaggio originale-
>>> Da: bind-users-bounces+stefano.chiesa=wki...@lists.isc.org  
>>> [mailto:bind-users-bounces+stefano.chiesa=wki...@lists.isc.org]  
>>> Per conto di pollex
>>> Inviato: mercoledì 9 marzo 2011 20.52
>>> A: comp-protocols-dns-b...@isc.org
>>> Oggetto: Operating system recommendation
>>>
>>> Hi, I want to know in your experience what is the best operating
>>> system to run bind for an ISP. We currently have Debian for the 5
>>> Cache servers and for the 2 Authoritative servers.
>>> We have around 111851 success querys in the cache servers and around
>>> 7267 zones created in the authoritative servers.
>>> We are doing a major re analysis for all the arquitecture and Debian
>>> is changing to soon their versions and only have support for 1  
>>> version
>>> before so I dont know if this is best option
>>>
>>> Best regards and thanks
>>> ___
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
>>>
>>>
>>> Hello.
>>> The italian Registration Authorithy, that manages more than 2  
>>> millions .it domains, runs theirs BIND dns server on UBUNTU.
>>>
>>> For futher info you can try to contact them at their email  
>>> addresses:
>>>
>>> i...@registro.it
>>> hostmas...@registro.it
>>>
>>> http://www.nic.it/?set_language=en
>>>
>>> Hope this help.
>>>
>>> Ciao.
>>> Stefano.
>>> ___

Re: dots in hostnames problem

2011-03-11 Thread Stephane Bortzmeyer
On Thu, Mar 10, 2011 at 01:24:01PM -0800,
 Matt Rae  wrote 
 a message of 54 lines which said:

> sounds like a solution would be to transfer the zone files outside
> of bind.

The solution to what? There is no problem at all, the files are
absolutely identical after the transfer. The only issue is your flawed
assumptions (as in the subject of the thread).
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Reliability and performance on a simple caching BIND9 server for uncached queries

2011-03-11 Thread Khoury Brazil
Hi,

I've noticed some speed and reliability issues with my BIND9 boxes
relating to uncached external queries. External queries that return NX
seem to be the worst offenders in these tests and are what I've
focused on during my testing. I've confirmed it using a simple
benchmarking tool called DNS Benchmark and some simple testing on my
part. DNS Benchmark points out that my BIND9 boxes "aren't reliable"
because "lookup requests that are dropped and ignored by nameservers
cause significant delays in Internet access" to quote the software.
DNS Benchmark compares your name servers against external name servers
and it shows my boxes as 86% reliable compared to the general list
(which includes the level 3 servers, Cox, Symantec, etc) which are,
for the most part at 100%. I'm guessing this has to do with the
software timing out.

Doing a simple test using nslookup doing uncached external lookups (on
ubuntu and one windows client):
No delay using nslookup or dig directly from my bind boxes to the
external name servers. This indicates to me that the bottle neck
doesn't exist between my internal and ISP's name servers.
No delay when using nslookup or dig from a client machine on my
network to the external name servers. This indicates to me that the
client isn't the issue.
A long delay with ubuntu clients looking up against my internal BIND
boxes; Timeouts with Windows and nslookup (due to its shorter
timeout).

Internal queries are fast using all of the above tests (the BIND box
forwards to different internal name servers that are authoritative for
our internal name space). This indicates to me that it isn't my bind
boxes being slow in general.

Is it normal to see slow responses when querying for uncached
non-existent domains? I've noticed that other external queries could
be faster, but these are really bad. When I query my internal bind
boxes that are authoritative for my internal domain directly they
respond instantly for NX domains. I don't admin those though so have
no insight into their configuration beyond the fact that they run on
some nix flavor and are BIND* boxes.

Thanks for any insight.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users