Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Charles Swiger
Hi— On Oct 28, 2013, at 9:05 PM, Alan Clegg wrote: > Slave X.internal.example.com +1; it’s also worth looking into why there is such a high volume of DNS queries. Is it simply a big network with a lot of chatty clients? Or is TTL turned down so low that client side caching is not effective and

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Alan Clegg
On Oct 28, 2013, at 8:08 PM, brett smith wrote: > OK I have the source of the problem now I just need an elegant way to > fix it and most cost ( Network TCP ) effective way to fix it > > The Windows Domain is responsible for X.internal.example.com and I am > presently forwarding X.internal.exa

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread brett smith
OK I have the source of the problem now I just need an elegant way to fix it and most cost ( Network TCP ) effective way to fix it The Windows Domain is responsible for X.internal.example.com and I am presently forwarding X.internal.example.com to their nameservers DC, resulting in TCP queries. W

Re: Performance Tuning RHEL 5 and Bind

2013-10-24 Thread Carsten Strotmann
Hi, Kevin Darcy writes: > Are these queries mostly for names in an Active Directory domain? The > default for Active Directory is for *every* Domain Controller to > register NS records at the apex of the AD domain. Pretty soon, for any > reasonably-sized AD infrastructure, all of those NSes cau

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Alan Clegg
On Oct 22, 2013, at 8:29 PM, brett smith wrote: > Yes tuning off IPTABLES conn-tracking makes a huge difference. I also > followed: > > https://access.redhat.com/site/solutions/304713 > https://access.redhat.com/site/solutions/168483 > > I still see some SYN_SENT from Windows PC's on tcp port

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread brett smith
t; Sent: Sunday, 20 October 2013 12:35 PM >> To: sth...@nethelp.no >> Cc: bind-users@lists.isc.org >> Subject: Re: Performance Tuning RHEL 5 and Bind >> >> When all the Windows PC's are switched to our resolver, bind stops >> responding. >> rndc queryl

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Kevin Darcy
Are these queries mostly for names in an Active Directory domain? The default for Active Directory is for *every* Domain Controller to register NS records at the apex of the AD domain. Pretty soon, for any reasonably-sized AD infrastructure, all of those NSes cause *all* queries for *any* name

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Mike Hoskins (michoski)
-Original Message- From: Alan Clegg Date: Tuesday, October 22, 2013 7:44 AM To: "bind-users@lists.isc.org" Subject: Re: Performance Tuning RHEL 5 and Bind >On Oct 21, 2013, at 9:47 AM, wbr...@e1b.org wrote: > >>> From: Alan Clegg >> >>> Fix yo

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Alan Clegg
On Oct 21, 2013, at 9:47 AM, wbr...@e1b.org wrote: >> From: Alan Clegg > >> Fix your windows clients. > > You can't fix stupid. I have lots of windows clients and they don't exhibit this "feature". There's something wrong on the windows clients and it's not the norm. To be honest, recent w

RE: Performance Tuning RHEL 5 and Bind

2013-10-21 Thread Lightner, Jeff
Original Message- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of wbr...@e1b.org Sent: Monday, October 21, 2013 9:47 AM To: bind-users@lists.isc.org Subject: Re: Performance Tuning RHEL 5 and Bind > F

Re: Performance Tuning RHEL 5 and Bind

2013-10-21 Thread WBrown
> From: Alan Clegg > Fix your windows clients. You can't fix stupid. Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not

RE: Performance Tuning RHEL 5 and Bind

2013-10-20 Thread Stuart Browne
o > Cc: bind-users@lists.isc.org > Subject: Re: Performance Tuning RHEL 5 and Bind > > When all the Windows PC's are switched to our resolver, bind stops > responding. > rndc querylog shows queries coming thru, I changed tcp-clients from > 1000 to 1 but DNS seems lagging, s

Re: Performance Tuning RHEL 5 and Bind

2013-10-20 Thread Alan Clegg
On Oct 19, 2013, at 9:34 PM, brett smith wrote: > When all the Windows PC's are switched to our resolver, bind stops responding. What does "stops responding" mean? Any logs? > rndc querylog shows queries coming thru, I changed tcp-clients from > 1000 to 1 but DNS seems lagging, so we swi

Re: Performance Tuning RHEL 5 and Bind

2013-10-19 Thread Steven Carr
On 20 October 2013 02:34, brett smith wrote: > When all the Windows PC's are switched to our resolver, bind stops responding. > rndc querylog shows queries coming thru, I changed tcp-clients from > 1000 to 1 but DNS seems lagging, so we switched back to the > original Windows Domain resolver.

Re: Performance Tuning RHEL 5 and Bind

2013-10-19 Thread brett smith
When all the Windows PC's are switched to our resolver, bind stops responding. rndc querylog shows queries coming thru, I changed tcp-clients from 1000 to 1 but DNS seems lagging, so we switched back to the original Windows Domain resolver. Besides increasing open files tuning, what TCP / sysc

Re: Performance Tuning RHEL 5 and Bind

2013-10-19 Thread sthaug
> I need to build a pair DNS cache servers to support 5000+ clients ( > PC's and Servers ). I have been looking for some guides on tuning > BIND and the OS for Enterprise performance rather than the defaults. > The version of bind is bind-9.8.2. 5000 clients is such a low number that I don't thin

Performance Tuning RHEL 5 and Bind

2013-10-18 Thread brett smith
I need to build a pair DNS cache servers to support 5000+ clients ( PC's and Servers ). I have been looking for some guides on tuning BIND and the OS for Enterprise performance rather than the defaults. The version of bind is bind-9.8.2. Thank You, Brett __