Re: views-based RPZ

2024-08-24 Thread Grant Taylor via bind-users
On 8/24/24 07:37, Carlos Horowicz via bind-users wrote: 2. if RPZ records are held in memory, why would an RPZ zone need to be stored n times if there are n orthogonal views ? That is, why the more views the more memory needed. Maybe you meant the qpcache, to store different answers, though I d

Enough is enough (Re: 9.18 horrendous)

2024-08-24 Thread Ondřej Surý
The bind-users mailing list’s purpose is to discuss BIND 9. As this thread is now widely off-topic, and I don’t want to hear more insults about me or my team, especially from people who has been already moderated for misbehaving (no, I am not letting that email through), I am putting the mailing

Re: views-based RPZ

2024-08-24 Thread G.W. Haywood
Hi there, On Sat, 24 Aug 2024, Carlos Horowicz wrote: ... ... is there an algorithm in bind9 or out there that quickly maps a client IP address to a CIDR, e.g. a something like a binary tree quicksearch ? or balanced red-black tree ? I don't know if this is going to help, but we use IP to CID

Re: 9.18 horrendous

2024-08-24 Thread Havard Eidnes via bind-users
>> That being said. It's preposterous to complain about free software. > > https://biplane.com.au/blog/?p=375 Well said! The original poster did not supply any information which might be of assistance in characterizing what he observed. He only said "1300 zones", and showed a "top" display. Not

Re: views-based RPZ

2024-08-24 Thread Carlos Horowicz via bind-users
Hi Greg, thanks for your insights. Ok so the limit of 64 response policy zones applies to one view. I wonder, assuming the views are orthogonal (no overlapping of CIDRs, as in an ISP assigning CIDRs to local loops): 1. is there an algorithm in bind9 or out there that quickly maps a client I

Re: 9.18 horrendous

2024-08-24 Thread Robert M. Stockmann
On Fri, 23 Aug 2024, Edwardo Garcia wrote: > Date: Fri, 23 Aug 2024 21:57:47 +1000 > From: Edwardo Garcia > To: bind-users@lists.isc.org > Subject: 9.18 horrendous to claim that 9.18 is horrendous is not a good verdict for this sofware and ISC in general. I personnally recommend to use and insta