BIND caches ENUM NAPTR records irrespective of TTL 0

2013-07-12 Thread Ramprakash V
Hi, I am using BIND 9.6 to enable my application to act as a ENUM server. The ENUM server performs routing and responds to ENUM NAPTR records. The NAPTR responses are sent with a TTL zero without any authority section. When I trigger a ENUM NAPTR load(using dig) with same digits, I could see

BIND Performance with Huge RPZ

2013-07-12 Thread Arie L. Putra
Dear All, We are building a server for recursive DNS Server, this server will be acted as a cache for our network. (several user-side DNS Server will forward to this server) Using Ubuntu Server with latest BIND version, we are trying to have RPZ incuded in this BIND, with around 800k blacklis

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Steven Carr
On 12 July 2013 11:11, Arie L. Putra wrote: > > Has anyone have experience, how RPZ with huge list will impact BIND performance, will it reduce DNS response time? we have six DNS server that will point to this server, each server is serving about 15Mbps of DNS Traffic on peak hour. > > this server

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Phil Mayers
On 12/07/13 11:11, Arie L. Putra wrote: Has anyone have experience, how RPZ with huge list will impact BIND performance, will it reduce DNS response time? we have six DNS server that will point to this server, each server is serving about 15Mbps of DNS Traffic on peak hour. We don't have that

Re: Reverse Lookups with Forwarders

2013-07-12 Thread sumsum 2000
Along the same lines as that of ipv4 address: i have the following zone file configuration for reverse lookup: Goal: 192.168.100.128/26 to be directed to 10.213.246.15 In this, the network part it 192.168.100.128 and network range is 191.168.100.129 - 191.168.100.190 in this specific case,

Re: BIND Performance with Huge RPZ

2013-07-12 Thread G.W. Haywood
Hi there, On Fri, 12 Jul 2013, Arie L. Putra wrote: We are building a server for recursive DNS Server, this server will be acted as a cache for our network. (several user-side DNS Server will forward to this server) Using Ubuntu Server with latest BIND version, we are trying to have RPZ incuded

Re: Reverse address entries

2013-07-12 Thread Sam Wilson
In article , Steven Carr wrote: > On 2 July 2013 14:42, Sam Wilson wrote: > > Can anyone here give examples of the types of various software that will > > not operate without a PTR record? > > There have already been numerous listings of software that require > reverse lookups. SMTP being the

Re: Reverse address entries

2013-07-12 Thread Sam Wilson
In article , Daniel McDonald wrote: > On 7/2/13 8:42 AM, "Sam Wilson" wrote: > > > There may be a subtle language thing going on here. I read the original > > post above as saying, literally, "you need PTR records because various > > software tries to match A and PTR records". It doesn't say

Re: Reverse address entries

2013-07-12 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/12/2013 11:23 AM, Sam Wilson wrote: > In article > , Steven > Carr wrote: > >> On 2 July 2013 14:42, Sam Wilson wrote: >>> Can anyone here give examples of the types of various software >>> that will not operate without a PTR record? >> >> Th

Re: Reverse Lookups with Forwarders

2013-07-12 Thread btb
On Jul 12, 2013, at 09.14, sumsum 2000 wrote: > Along the same lines as that of ipv4 address: > i have the following zone file configuration for reverse lookup: > > Goal: 192.168.100.128/26 to be directed to 10.213.246.15 > > In this, the network part it 192.168.100.128 and > network r

bind classless slave from microsoft dns classful SOA?

2013-07-12 Thread Michael Hare
Bind-users; I have been asked to slave a /24 from a microsoft SOA, however, their authority for the /24 is false in that they really only have authority to 192/26. Am I correct in that there is no way to slave said zone [x.y.z.in-addr.arpa] but serve it as a different zone [192/26.x.y.z.in-

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Chris Buxton
On Jul 12, 2013, at 3:11 AM, Arie L. Putra wrote: > We are building a server for recursive DNS Server, this server will be acted > as a cache for our network. (several user-side DNS Server will forward to > this server) > Using Ubuntu Server with latest BIND version, we are trying to have RPZ >

Re: bind classless slave from microsoft dns classful SOA?

2013-07-12 Thread Chris Buxton
On Jul 12, 2013, at 9:09 AM, Michael Hare wrote: > Bind-users; > > I have been asked to slave a /24 from a microsoft SOA, however, their > authority for the /24 is false in that they really only have authority to > 192/26. > > Am I correct in that there is no way to slave said zone [x.y.z.in-a

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Vernon Schryver
> From: Steven Carr > It's very difficult to predict the impact on performance in general. Yes, the reasonable tactic is to build a representative list of queries from your query logs and use queryperf to hit a test server with those 800K policy zone labels. >

Which Forwarder Does Bind Pick?

2013-07-12 Thread Jiann-Ming Su
In a simple fowarding only name server config: options {     forward first;     forwarders {     10.220.0.34;     10.220.0.38;     }; } How does the named process determine when to use one forwarder or both forwarders?  I'm sniffing the traffic and on some queries, it goes for the fi

Re: Which Forwarder Does Bind Pick?

2013-07-12 Thread Steven Carr
On 12 July 2013 18:44, Jiann-Ming Su wrote: > How does the named process determine when to use one forwarder or both > forwarders? I'm sniffing the traffic and on some queries, it goes for the > first one. On other queries, it goes for both. Thanks for any > clarification. > BIND will query b

Re: Reverse Lookups with Forwarders

2013-07-12 Thread Leonard Mills
Sumsum-- Using the technique you document, you will need a zone for each of 128.100.168.192.in-addr.arpa through 190.100.168.192.in-addr.arpa Or you might want to serve the entire class C 100.168.192.in-addr.arpa, especially if you can get a feed for the zone excluding your portion. Hope this

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Noel Butler
On Fri, 2013-07-12 at 16:31 +, Vernon Schryver wrote: > Patches for both of those versions of RPZ speed improvements for some > BIND9 releases can be with the BIND RRL patches by following the link > labeled "Patch files for BIND9" on http://www.redbarn.org/dns/ratelimits > > Both of those

RE: BIND Performance with Huge RPZ

2013-07-12 Thread Arie L. Putra
Hi, Thanks for the information, really appreciate it, In qps term, each of my server around 10k qps. Currentlt now we are just using simple query logging to file, no syslog yet :( BR, Arie L. Putra 陈维文 -Original Message- From: "Chris Buxton" Sent: ‎7/‎12/‎2013 11:12 PM To: "Arie L.Pu

Re: BIND Performance with Huge RPZ

2013-07-12 Thread Vernon Schryver
> From: Noel Butler > > BIND9 releases can be with the BIND RRL patches by following the link > > labeled "Patch files for BIND9" on http://www.redbarn.org/dns/ratelimits > > > > Both of those versions are or will be in official BIND releases. > > I've lost track of which releases have or will ha