Problem in Performance test

2016-01-14 Thread RunxiaWan
Hi all, I am doing performance test for my company's resolver with BIND 9.10.3 and find something weird. The test client and resolver are in the same LAN. When I use a small set of domain as an input with a 1 per second query sending rate, everything looks reasonable. However, when I use a set

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread Reindl Harald
Am 14.01.2016 um 22:37 schrieb John Miller: On Thu, Jan 14, 2016 at 4:01 PM, Reindl Harald wrote: normally anything is done with backends and scripts Yep - via Puppet and scripting for us, mostly. so after once configured it don't matter if things are bekow /var/named/chroot/ or on a high

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread John Miller
On Thu, Jan 14, 2016 at 4:01 PM, Reindl Harald wrote: > > > Am 14.01.2016 um 21:48 schrieb John Miller: >> >> Thanks for the advice, Mike. We chrooted our install because it was >> "best practice" security-wise, but from an administration standpoint, >> it's been a bit of a headache: for example,

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread Reindl Harald
Am 14.01.2016 um 21:48 schrieb John Miller: Thanks for the advice, Mike. We chrooted our install because it was "best practice" security-wise, but from an administration standpoint, it's been a bit of a headache: for example, you have to keep straight what goes in /etc and /var/named/chroot/et

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread John Miller
Thanks for the advice, Mike. We chrooted our install because it was "best practice" security-wise, but from an administration standpoint, it's been a bit of a headache: for example, you have to keep straight what goes in /etc and /var/named/chroot/etc, you end up setting a $BIND_CHROOT environment

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread Mike Hoskins (michoski)
Yes you can run without the chroot. Years ago it was considered best practice to chroot and most power users would have said you were insane not to do so. Now there are increasingly many who say it's not worth the effort (fairly easy to get around in many cases) -- do a bit of google engineeri

Re: dnssec-keyfromlabel-pkcs11 label format

2016-01-14 Thread arun
My bad, there was a newline /n character at the pin file. -- View this message in context: http://bind-users-forum.2342410.n4.nabble.com/dnssec-keyfromlabel-pkcs11-label-format-tp1382p1413.html Sent from the Bind-Users forum mailing list archive at Nabble.com. _

RE: What is the use of having a chroot path during installation

2016-01-14 Thread MURTARI, JOHN
-Original Message- From: Harshith Mulky To: "bind-users@lists.isc.org" Subject: What is the use of having a chroot path during installation of Bind When installing bind, the following 2 are installed bind-9.8.2-0.17.rc1.el6.x86_64 bind-chroot-9.8.2-0.17.rc1.el6.x86_64 What is t

Re: Bind9 on VMWare

2016-01-14 Thread Tony Finch
Mike Hoskins (michoski) wrote: > > I've ran several large DNS infras over the years. Back in 2005/6 I > finally drank the koolaid and migrated a large caching infra > (authoritative was kept on bare metal) to VMWare+Linux. Amusingly our setup is the exact opposite - authoritative on VMs and recu