Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread Barry Margolin
In article , Dave Warren wrote: > On 2016-03-25 07:21, Barry Margolin wrote: > > In article , > > Dave Warren wrote: > > > >> I'm more interested in the impact from the perspective of an > >> authoritative server operator and in some respects sites that use short > >> TTLs will increase the o

Re: Can bind be configured to not drop RR's from the cache when the upstream DNS server is unresponsive

2016-03-25 Thread Barry Margolin
In article , John Wobus wrote: > On Mar 18, 2016, at 6:28 AM, Barry Margolin wrote: > > In article , > > Mark Andrews wrote: > > > >> How do you actually expect this to ever work in real life? > > > > I'm pretty sure Google DNS does this. Other resolver operators often get > > complaints ab

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread PGNd
On Fri, Mar 25, 2016, at 05:03 PM, Evan Hunt wrote: > (And I didn't even remember to mention the fact that some DLZ modules now > support DNS UPDATE, which means you can have *dynamic* dynamically loadable > Dynamically Loadable Zones zones. It's a good thing we work on name > servers here at ISC b

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread Evan Hunt
On Fri, Mar 25, 2016 at 11:59:41PM +, Evan Hunt wrote: > (The name "Dynamically Loadable Zones" is, in retrospect, unfortunate. Now > that it's possible to load DLZ modules at runtime with dlopen(), that means > you can have dynamically loadable Dynamically Loadable Zones zones. Sorry > about

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread Evan Hunt
On Fri, Mar 25, 2016 at 03:54:34PM -0700, PGNd wrote: > I'm a mite confused about what the summary's telling me then. > > If I remove the 'unncessary' config items, the summary reports: > > Dynamically loadable zone (DLZ) drivers: > None > > To my read, that says NO drivers will be d

bind-9.10.3-P4 'make depend' error @ missing 'driver.c'

2016-03-25 Thread PGNd
While working on other issues, in a build of bind-9.10.3-P4, I noticed a "driver.c: No such file or directory" error at ./configure ... --without-gssapi ... make depend ... make[4]: Entering directory '/usr/local/src/bind-9.10.3-P4/bin/t

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread PGNd
On Fri, Mar 25, 2016, at 03:48 PM, Evan Hunt wrote: > To use the runtime-linkable modules, all you need is "configure". > (The "--with-dlopen" part is enabled by default already, and the > others are unnecessary.) > > Then "cd contrib/dlz/modules/bdbhpt" (or whichever one you want to use), > and

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread Evan Hunt
> Right. I was just referring to the *docs*, which afaict are still the most > complete, conceptually re: DLZ anyway > > IIUC (?), I'm correctly invoking with at > > ./configure ... > --with-dlz-postgres=no \ > --with-dlz-mysql=no \ > --with-dlz-bdb=/usr/local/dlz-bdb \

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread PGNd
Thanks for the quick reply. > These still work but are somewhat obsolete now. BIND now has the ability to > dynamically load DLZ modules at run time Right. I was just referring to the *docs*, which afaict are still the most complete, conceptually re: DLZ anyway IIUC (?), I'm correctly invoking

Re: non-BDB support for DLZ in Bind9?

2016-03-25 Thread Evan Hunt
On Fri, Mar 25, 2016 at 01:40:29PM -0700, PGNd wrote: > In DLZ, as packaged with bind9, currently a variety of db drivers are > supported, > > grep "AC_ARG_WITH(dlz_" contrib/dlz/config.dlz.in > AC_ARG_WITH(dlz_postgres, > AC_ARG_WITH(dlz_mysql, > AC_ARG_WITH(dlz_bdb,

non-BDB support for DLZ in Bind9?

2016-03-25 Thread PGNd
In DLZ, as packaged with bind9, currently a variety of db drivers are supported, grep "AC_ARG_WITH(dlz_" contrib/dlz/config.dlz.in AC_ARG_WITH(dlz_postgres, AC_ARG_WITH(dlz_mysql, AC_ARG_WITH(dlz_bdb, AC_ARG_WITH(dlz_filesystem, AC_ARG_WITH(dlz_ldap,

Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread Dave Warren
On 2016-03-25 07:21, Barry Margolin wrote: In article , Dave Warren wrote: I'm more interested in the impact from the perspective of an authoritative server operator and in some respects sites that use short TTLs will increase the odds of my longer-TTL's records staying in the cache longer b

BIND 9.11.0a1 is now available

2016-03-25 Thread Michael McNally
The first official alpha development release of the new BIND 9.11 branch has been published and announced via our bind-announce list -- if you're not subscribed to that list you can see the announcement in the list's public archive here: https://lists.isc.org/pipermail/bind-announce/2016-March/0

Re: [Non-DoD Source] Build with GEOIP

2016-03-25 Thread PGNd
On Fri, Mar 25, 2016, at 09:50 AM, Olsen, Richard William (Rick) CTR (US) wrote: > Thanks to those who have responded with helpful replies. I understand now > that the bind build does not have the api actually built in and that I have > to install one. just fyi, note that, even with --with-geo

Re: Can bind be configured to not drop RR's from the cache when the upstream DNS server is unresponsive

2016-03-25 Thread Warren Kumari
On Fri, Mar 25, 2016 at 12:49 PM John Wobus wrote: > On Mar 18, 2016, at 6:28 AM, Barry Margolin wrote: > > In article , > > Mark Andrews wrote: > > > >> How do you actually expect this to ever work in real life? > > > > I'm pretty sure Google DNS does this. Other resolver operators often get >

RE: [Non-DoD Source] Build with GEOIP

2016-03-25 Thread Olsen, Richard William (Rick) CTR (US)
Thanks to those who have responded with helpful replies. I understand now that the bind build does not have the api actually built in and that I have to install one. Rick. -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ols

Re: Can bind be configured to not drop RR's from the cache when the upstream DNS server is unresponsive

2016-03-25 Thread John Wobus
On Mar 18, 2016, at 6:28 AM, Barry Margolin wrote: > In article , > Mark Andrews wrote: > >> How do you actually expect this to ever work in real life? > > I'm pretty sure Google DNS does this. Other resolver operators often get > complaints about "Why can't I look up through your DNS > serv

Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread John Wobus
> IMHO, memory is so cheap these days that any server that has to eject > cache entries because of memory limits means the server operator isn't > really trying to do their job well. For handling host names, perhaps yes. But it implies sanity on the part of all apps that your clients use. App d

Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread John Wobus
On Mar 24, 2016, at 12:18 PM, Ben Bridges wrote: > > TXT records are multiple-purpose. They can be used for SPF records, Office > 365 “MS” records, DMARC records, or whatever arbitrary uses someone dreams > up, all for the same domain name. Microsoft wants a short TTL for their > Office 365

Re: Build with GEOIP

2016-03-25 Thread Evan Hunt
On Fri, Mar 25, 2016 at 01:58:51PM +, Olsen, Richard William (Rick) CTR (US) wrote: > "BIND 9.10's GeoIP features work by allowing you to create ACL elements that > evaluate based on the location information for the client's IP address. This > uses the API provided by MaxMindR to query thei

Re: Build with GEOIP

2016-03-25 Thread Pushkar Pradhan
Sounds to me like it is looking for the header file which is in bin/named/include/named. Can you try setting up your GeoIP so that everything is under the same directory?  pushkar On Friday, March 25, 2016 7:00 AM, "Olsen, Richard William (Rick) CTR (US)" wrote: I'm trying to configu

Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread Barry Margolin
In article , Dave Warren wrote: > I'm more interested in the impact from the perspective of an > authoritative server operator and in some respects sites that use short > TTLs will increase the odds of my longer-TTL's records staying in the > cache longer before it gets hit by a cache-size li

Build with GEOIP

2016-03-25 Thread Olsen, Richard William (Rick) CTR (US)
I'm trying to configure the GEOIP option in to our bind build. I have the free GeoIP databases for initial testing. Can anyone point me to a walkthrough or give me the required steps. I've read the stuff I can find on ISC and it talks about using the --with-geoip config option and states: "BIND

RE: Regarding compiling BIND 9.10.3-p4 on a SystemD Distro

2016-03-25 Thread Lightner, Jeff
The RedHat/CentOS version starts with an upstream version from ISC. At the time they first get it they optimize to fit within the other packages they’ve setup on the specific major release (e.g. RHEL5 had BIND 9.3.6, RHEL7 has BIND 9.9.4). After that they put their own extended versioning o

Re: Configuring different TTLs in multiple RRs for the same domain name, TYPE, and CLASS

2016-03-25 Thread Dave Warren
On 2016-03-24 18:28, Barry Margolin wrote: In article , Dave Warren wrote: On 2016-03-24 15:20, Tony Finch wrote: Dave Warren wrote: On 2016-03-24 09:46, Ray Bellis wrote: On 24/03/2016 16:41, Tony Finch wrote: When I changed our TTLs from 24h to 1h last year, it didn't have a visible