Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Barry Margolin
In article , Kevin Darcy wrote: > On 4/4/2010 3:33 PM, Barry Margolin wrote: > > In article, > > Kevin Darcy wrote: > > > > > >> On 4/1/2010 9:19 PM, Barry Margolin wrote: > >> > >>> In article, > >>>Kevin Darcy wrote: > >>> > >>> > >>> > Re-use of source ports fo

Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Kevin Darcy
On 3/30/2010 5:36 AM, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is a

Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Kevin Darcy
On 4/4/2010 3:33 PM, Barry Margolin wrote: In article, Kevin Darcy wrote: On 4/1/2010 9:19 PM, Barry Margolin wrote: In article, Kevin Darcy wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of penalizing it, in the d

Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Kevin Darcy
On 4/4/2010 2:24 PM, Sten Carlsen wrote: On 04/04/10 17:41, Kevin Darcy wrote: On 4/1/2010 9:19 PM, Barry Margolin wrote: In article, Kevin Darcy wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of penalizing it, in the default configurat

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Mark Andrews
In message <4bb8b33b.4070...@chrysler.com>, Kevin Darcy writes: > On 4/1/2010 9:19 PM, Barry Margolin wrote: > > In article, > > Kevin Darcy wrote: > > > > > >> Re-use of source ports for DNS queries is a bad security practice. I > >> cast my vote in favor of penalizing it, in the default c

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Barry Margolin
In article , Kevin Darcy wrote: > On 4/1/2010 9:19 PM, Barry Margolin wrote: > > In article, > > Kevin Darcy wrote: > > > > > >> Re-use of source ports for DNS queries is a bad security practice. I > >> cast my vote in favor of penalizing it, in the default configuration of > >> any devic

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Sten Carlsen
On 04/04/10 17:41, Kevin Darcy wrote: > On 4/1/2010 9:19 PM, Barry Margolin wrote: >> In article, >> Kevin Darcy wrote: >> >> >>> Re-use of source ports for DNS queries is a bad security practice. I >>> cast my vote in favor of penalizing it, in the default configuration of >>> any device t

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Kevin Darcy
On 4/1/2010 9:19 PM, Barry Margolin wrote: In article, Kevin Darcy wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of penalizing it, in the default configuration of any device that responds to DNS requests. It's really not the job

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Barry Margolin
In article , Kevin Darcy wrote: > Re-use of source ports for DNS queries is a bad security practice. I > cast my vote in favor of penalizing it, in the default configuration of > any device that responds to DNS requests. It's really not the job of a load balancer or server to force clients to

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Mark Andrews
In message <4bb4ed5a.20...@chrysler.com>, Kevin Darcy writes: > On 4/1/2010 12:37 AM, Mark Andrews wrote: > > In message<4bb1c63b.30...@ies.etisalat.ae>, Abdulla Bushlaibi writes: > > > >> We are facing query drops by using dnsperf tool from ISC testing the DNS > >> service via load balancer.

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 3/30/2010 5:36 AM, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is a

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 4/1/2010 12:37 AM, Mark Andrews wrote: In message<4bb1c63b.30...@ies.etisalat.ae>, Abdulla Bushlaibi writes: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the lo

Re: Same source port queries dropped by ServerIron load balancer

2010-03-31 Thread Mark Andrews
In message <4bb1c63b.30...@ies.etisalat.ae>, Abdulla Bushlaibi writes: > We are facing query drops by using dnsperf tool from ISC testing the DNS > service via load balancer. Multiple queries from the same source port > are being dropped partially by the load balancer and as per the load > bala

Re: Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Abdulla Bushlaibi
The tool queryperf is a useful tool and it gives you details about a DNS server performance. However, it would be useful to have an option in queryperf to use random source ports to test real life scenarios. -- Abdulla Ahmad Bushlaibi On 3/31/2010 12:07 AM, Kevin Darcy wrote: On 3/30/2010 8

Re: Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Kevin Darcy
On 3/30/2010 8:00 AM, Tony Finch wrote: On Tue, 30 Mar 2010, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per th

Re: Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Tony Finch
On Tue, 30 Mar 2010, Abdulla Bushlaibi wrote: > We are facing query drops by using dnsperf tool from ISC testing the DNS > service via load balancer. Multiple queries from the same source port are > being dropped partially by the load balancer and as per the load balancer > vendor feed back, this

Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Abdulla Bushlaibi
We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is a security feature and this situation doesn't ha