Re: Rate-Limit Question

2013-06-15 Thread Drunkard Zhang
2013/6/15 Vernon Schryver : >> From: Drunkard Zhang > >> Great patchset, and I found this docs will be in ARM: >> >> [ rate-limit { >> [ responses-per-second number ; ] >> [ referrals-per-second number ; ] >> [ nodata-per-second number ; ] >> [ nxdomains-per-second number ; ] >> [ errors-per-secon

Re: Rate-Limit Question

2013-06-15 Thread Vernon Schryver
> From: Drunkard Zhang > Great patchset, and I found this docs will be in ARM: > > [ rate-limit { > [ responses-per-second number ; ] > [ referrals-per-second number ; ] > [ nodata-per-second number ; ] > [ nxdomains-per-second number ; ] > [ errors-per-second number ; ] > [ all-per-second number

Re: Rate-Limit Question

2013-06-14 Thread Drunkard Zhang
2013/6/14 Phil Mayers : > On 14/06/13 15:27, Manson, John wrote: >> >> We are running Bind 9.9.2 and would like to invoke the rate-limit option >> but named says ‘unknown option’. >> >> Do we need to upgrade bind to get this option? > > > You need to apply the patches here: > > http://ss.vix.su/~vj

Re: [BIND-USERS] Re: Rate-Limit Question

2013-06-14 Thread Jerry K
Thank you. This is great news. Jerry On 06/14/13 11:08 AM, Evan Hunt wrote: On Fri, Jun 14, 2013 at 03:36:19PM +0100, Phil Mayers wrote: It's not built into bind (yet). Correct. For the record, it'll be in 9.10.0 by default and 9.9.4 as a compile-time option (--enable-rrl). (Our usual po

Re: Rate-Limit Question

2013-06-14 Thread Doug Barton
On 06/14/2013 09:08 AM, Evan Hunt wrote: (Our usual policy is not to add substantial new features in maintenance releases like 9.9.4; making it a compile-time option that defaults to off is our way of tiptoeing around the rule.) Quite reasonable, and much appreciated. :) ___

Re: Rate-Limit Question

2013-06-14 Thread Chris Thompson
On Jun 14 2013, Evan Hunt wrote: On Fri, Jun 14, 2013 at 03:36:19PM +0100, Phil Mayers wrote: It's not built into bind (yet). Correct. For the record, it'll be in 9.10.0 by default and 9.9.4 as a compile-time option (--enable-rrl). The latter is particularly good news in view of the ESV st

Re: Rate-Limit Question

2013-06-14 Thread Carlos M. Martinez
tks !! On 6/14/13 1:21 PM, Evan Hunt wrote: > On Fri, Jun 14, 2013 at 01:10:47PM -0300, Carlos M. Martinez wrote: >> thanks for the heads up. Do you have a estimated time of release for >> 9.9.4 and 9.9.10 ? > Every time I make predictions about dates, events conspire to make > me wrong, but I'm *

Re: Rate-Limit Question

2013-06-14 Thread Evan Hunt
On Fri, Jun 14, 2013 at 01:10:47PM -0300, Carlos M. Martinez wrote: > thanks for the heads up. Do you have a estimated time of release for > 9.9.4 and 9.9.10 ? Every time I make predictions about dates, events conspire to make me wrong, but I'm *hoping* to have 9.9.4 out in early August. -- Evan

Re: Rate-Limit Question

2013-06-14 Thread Evan Hunt
> Or, I believe, you can pay for a BIND^w DNS-Co subscription and download > a version with the magic built in? This is also true. DNSco subscribers get first bite at the apple with this and several other features that will be in 9.10. (Primarily GeoIP support, DSCP, and some enhancements to DLZ.

Re: Rate-Limit Question

2013-06-14 Thread Warren Kumari
On Jun 14, 2013, at 12:08 PM, Evan Hunt wrote: > On Fri, Jun 14, 2013 at 03:36:19PM +0100, Phil Mayers wrote: >> It's not built into bind (yet). > > Correct. For the record, it'll be in 9.10.0 by default and 9.9.4 as a > compile-time option (--enable-rrl). Thank you for the clarification. Loo

Re: Rate-Limit Question

2013-06-14 Thread Carlos M. Martinez
Evan, thanks for the heads up. Do you have a estimated time of release for 9.9.4 and 9.9.10 ? Warm regards, ~Carlos On 6/14/13 1:08 PM, Evan Hunt wrote: > On Fri, Jun 14, 2013 at 03:36:19PM +0100, Phil Mayers wrote: >> It's not built into bind (yet). > > Correct. For the record, it'll be in

Re: Rate-Limit Question

2013-06-14 Thread Evan Hunt
On Fri, Jun 14, 2013 at 03:36:19PM +0100, Phil Mayers wrote: > It's not built into bind (yet). Correct. For the record, it'll be in 9.10.0 by default and 9.9.4 as a compile-time option (--enable-rrl). (Our usual policy is not to add substantial new features in maintenance releases like 9.9.4; ma

Re: Rate-Limit Question

2013-06-14 Thread Warren Kumari
On Jun 14, 2013, at 10:37 AM, Stephane Bortzmeyer wrote: > On Fri, Jun 14, 2013 at 02:27:50PM +, > Manson, John wrote > a message of 138 lines which said: > >> We are running Bind 9.9.2 and would like to invoke the rate-limit >> option but named says 'unknown option'. > > RRL (Response R

Re: Rate-Limit Question

2013-06-14 Thread Stephane Bortzmeyer
On Fri, Jun 14, 2013 at 02:27:50PM +, Manson, John wrote a message of 138 lines which said: > We are running Bind 9.9.2 and would like to invoke the rate-limit > option but named says 'unknown option'. RRL (Response Rate Limiting) is an unofficial patch. You'll have to patch the source fi

Re: Rate-Limit Question

2013-06-14 Thread Phil Mayers
On 14/06/13 15:27, Manson, John wrote: We are running Bind 9.9.2 and would like to invoke the rate-limit option but named says ‘unknown option’. Do we need to upgrade bind to get this option? You need to apply the patches here: http://ss.vix.su/~vjs/rrlrpz.html It's not built into bind (yet)

Re: Rate-Limit Question

2013-06-14 Thread Carlos M. Martinez
You need to patch your 9.9.2 source code and recompile. Take a look at: http://www.redbarn.org/dns/ratelimits cheers, ~Carlos On 6/14/13 11:27 AM, Manson, John wrote: > We are running Bind 9.9.2 and would like to invoke the rate-limit option > but named says ‘unknown option’. > > Do we need to