BIND retries w/o edns=0 on servfail response

2016-12-07 Thread Daniel Stirnimann
Hello all, I've been wondering for years why I get occasional log messages like the following: 07-Dec-2016 21:06:53.783 dnssec: info: validating abuse.ch/SOA: got insecure response; parent indicates it should be secure 07-Dec-2016 21:07:02.984 dnssec: info: validating abuse.ch/SOA: got insecu

Re: Logging to syslog

2016-12-07 Thread sthaug
> > What exactly does "slow down" mean here? Are you missing messages in > > the log files? Or are requests not answered in a timely fashion? > > > > "slow down" means an increment in the time consumed by bind to answer a > query. > "heavy load" means about 20 millions query / day per machine, wit

Re: Logging to syslog

2016-12-07 Thread Ivan Fabris
2016-12-07 8:27 GMT+01:00 Peter Rathlev : > stores _everything_, including debug messages from "execute", you might > want "Storage=volatile" there as well. You probably already have > thanks, i missed this volatile thing > What exactly does "slow down" mean here? Are you missing messages in >

Query on Bind9 DLZ LDAP Connections load sharing

2016-12-07 Thread Ram Kishore B
Hi all, We have a query related to the Bind9 load sharing mechanism across multiple LDAP connections. The set-up and configuration details are as below. - 1 DNS Simulator using dnsperf package - 1 Bind9 server(version 9.9.4) in RHEL 7.2 and DLZ LDAP plugin enabled during compilation. This server h