Re: Bad performance from BIND 9.10 on RHEL 6.5
Shawn, Same with us here. We tested using bind 9.9.5 the recursive queries can reach 10,000 qps and when using 9.10-P1/9.10 .. we only can burst at 3,000 QPS.. Have you find any solution to share with us? Thanks amir On Saturday, May 3, 2014 4:42:30 AM UTC+8, Shawn Zhou wrote: > I was hoping that BIND 9.10 would outperform BIND 9.9.4b1 on RHEL 6.5 but I > was surprised to see so much performance drop from BIND 9.10. > > > We have been able to send test traffic with 180K qps against 9.9.4b1 without > seeing query drops but with 9.10, the query drop rate was 18%. Both of the > numbers were obtained with 16 UDP listeners and 24 workers on identical > Sandybridge hardware with 24 CPU threads and 24G RAM. Default 12 UDP > listeners setting with 9.10 is even worse; hence, 16 UDP listeners are used > for apple-to-apple comparison. > > > > We compiled > BIND 9.10 and 9.9.4b1 with the same configuration options. I also tried > '--with-tuning=large' for 9.10 and that didn't really help in our test > environment. > > > I wonder what type of hardware ISC and test load used to test BIND 9.10. Are > there adjustment need to be made for 9.10 to have it perform on par with > 9.9.4b1? > > > > > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Got error mssg when I started ISC Bind service
I received an error mssg when I tried to start ISC Bind I just installed on my server (Windows 2003 server): "Could not start the ISC Bind service on local computer. Error 1069: The service did not start due to a logon failure." How do I start the service and how do I get rid of that error? ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Loadbalance caching dns server
You also could try PF in BSD http://www.openbsd.org/faq/pf/pools.html -- "If someone feels that they had never made a mistake in their life, then it means they had never tried a new thing in their life" Regards, Amir Haris Ahmad M.Sc. in Computer Networking CNE6, MCP, GSEC, GCIH, LPIC1, CISE, ENSA LOCALHOST SDN BHD Web : http://www.localhost.my Mobile : +6012 312 1979 Fax : +603 5511 4064 On Mar 20, 2012, at 5:20 PM, Matus UHLAR - fantomas wrote: > On 20.03.12 14:41, trm asn wrote: >> Is there any mechanism to load balance Caching-DNS server. For example.. >> >> Cache-DNS1 : 192.168.1.98 >> Cache-DNS2: 192.168.1.99 >> >> Client : 192.168.1.199 >> >> When 192.168.1.199 send 10 request to query cache-dns then this 10 request >> will be send to each Cache-DNS server with a load balance method. Each >> server will get 5 requests. > > there are network appliances that allow to do such thing. For example, nortel > alteon, cisco ACE, or linux ipvs. > > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > If Barbie is so popular, why do you have to buy her friends? > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: a domain can ns of itself?
Fajar, Yes, This is glue record. pahlevanzadeh.info. 14400 IN NS shared.pahlevanzadeh.info. shared.pahlevanzadeh.info. A On Thu, Mar 29, 2012 at 7:46 AM, Fajar A. Nugraha wrote: > On Thu, Mar 29, 2012 at 6:33 AM, Mohsen Pahlevanzadeh > wrote: > > pahlevanzadeh.info. 14400 IN NS shared.pahlevanzadeh.info. > > > > Is it Possible? > > Yes. Google does it > > > $ dig google.com ns > > ; <<>> DiG 9.8.1-P1 <<>> google.com ns > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62917 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;google.com.IN NS > > ;; ANSWER SECTION: > google.com. 86399 IN NS ns4.google.com. > google.com. 86399 IN NS ns2.google.com. > google.com. 86399 IN NS ns1.google.com. > google.com. 86399 IN NS ns3.google.com. > > ;; Query time: 150 msec > ;; SERVER: 8.8.8.8#53(8.8.8.8) > ;; WHEN: Thu Mar 29 06:42:55 2012 > ;; MSG SIZE rcvd: 100 > > > To do so, you must add glue records in your registrar. Different > registrars might have different ways to do so. Example for godaddy: > http://www.ehow.com/how_8116690_add-glue-records-godaddy.html > > -- > Fajar > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Free secondary servers supporting DNSSEC?
Hi Robert.. You can try using my DNS project.. http://manage.dnssocial.com http://www.dnssocial.com http://manage.dnssocial.com/gdrive Please click "add slave server" button. TQ FYI we also already come out with appliance version. "If someone feels that they had never made a mistake in their life, then it means they had never tried a new thing in their life" Regards, Amir Haris Ahmad M.Sc. in Computer Networking CNE6, MCP, GSEC, GCIH, CiSE, LPIC1, NCLA, ENSA Member of: Malaysian National Computer Confederation (MNCC) The Open Web Application Security Project (OWASP) Information Security Professional Association of Malaysia (ISPA) LOCALHOST SDN BHD Web : http://www.localhost.my Mobile : +6012 312 1979 Fax : +603 5523 4445 *Disclaimer *: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secured or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Localhost Sdn. Bhd. will not accept any liability in respect of such communication that violates our e-mail policy. www.localhost.my On Sun, Feb 17, 2013 at 8:40 PM, Robert Moskowitz wrote: > I hope to roll out my DNS upgrade today, but without enabling DNSSEC; that > will take a bit longer. > > One of my secondaries, though, does not support DNSSEC and it is the one > that gives me a bit of geographical diversity. So I am looking for > someplace that will accept my smallish domains. > > thank you for all of your help in getting me this far along. Stay tune > for the inevitable DNSSEC questions! > > > __**_ > Please visit > https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users>to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users> > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
