Looking for speakers on DNS-related topics

2012-02-15 Thread Chris Westin
I organize the speakers for the Bay Area Large-Scale Production Engineering meetup (http://www.meetup.com/SF-Bay-Area-Large-Scale-Production-Engineering/ ; take a look at the "PAST" tab to see the kinds of events we've had). For our March event, on Thursday March 22nd (http://www.meetup.com/SF-Bay

Re: Query Regarding NSEC RR in DNSSEC

2012-02-15 Thread Chris Thompson
On Feb 14 2012, Gaurav kansal wrote: We have a Authenticated Response in DNSSEC through trust chain. Now my question is why we itself need a NSEC when we get response from DNSSEC enabled server authentically. Means, if a Record exist in DNSSEC, then it replies the answer along with RRSIG of th

Re: Efficacy of using short timeout values for an A record

2012-02-15 Thread goran kent
On Tue, Feb 14, 2012 at 7:01 PM, Oliver Garraux wrote: >> I need to setup an A record for a machine who's IP might change >> unexpectedly, and I need to ensure PCs out there cache it for as short >> a time as possible: >> >>    host1    300  IN A 10.10.10.10 >> >> Does anyone know whether MS windo

Re: Can i use my custom root hint file

2012-02-15 Thread Jan-Piet Mens
> For My internal DNS setup i want to create a internal root hint file . > Should i follow the pattern of standard root hint file ? Yes, create your own hints zone containing one or more NS RRsets with their respective glue. Something along these lines: .360 IN NS

RE: Efficacy of using short timeout values for an A record

2012-02-15 Thread Marc Lampo
More or less ! While I don't think it's a bug - I actually like the good feature ! - Bind does allow to change some values in replies to make them "more reasonable". With respect to "TTL", there are : max-ncache-ttl : max negative cache time (defaults to 3 hours - with built-in, not chang