"overlay" views

2020-01-20 Thread Brian J. Murrell
I'm really not sure about what the name of this feature I am going to describe would be. I would probably call it an "overlay view". But I am sure there are better names. Imagine I have a BIND 9 server for the following network topology: Network 1 192.168.1.0/24 -

Re: "overlay" views

2020-01-20 Thread Tony Finch
Brian J. Murrell wrote: > > But the hosts on Network 1 and Network 2 need to resolve the same name > (let's call it "gateway") to the address of their interface on Router. > So that is, hosts on Network 1 want a query of "gateway." to resolve to > 192.168.1.254 and hosts on Network 2 want a query

RE: Slow recursive query performance on Windows x64

2020-01-20 Thread Steve Farr via bind-users
Yeah, it's hard to disagree on the "should" part but we all definitely have to administer networks in an imperfect world... To my mind, when there's zero ipv6 connectivity beyond the LAN, it would be handy to not ask the firewall to create 3x more TCP connections that it can never complete, and/

Re: "overlay" views

2020-01-20 Thread Bob Harold
On Mon, Jan 20, 2020 at 8:28 AM Brian J. Murrell wrote: > I'm really not sure about what the name of this feature I am going to > describe would be. I would probably call it an "overlay view". But I > am sure there are better names. > > Imagine I have a BIND 9 server for the following network t

Re: Slow recursive query performance on Windows x64

2020-01-20 Thread Ondřej Surý
The problem is that apparently[*] the machines in your network have default IPv6 routes, but you don’t have IPv6 connectivity. Fix that and you don’t have to apply any bandaids. I think we should just remove filter- in the next release cycle of BIND 9, having the feature doesn’t do any good

RE: Slow recursive query performance on Windows x64

2020-01-20 Thread Steve Farr via bind-users
... And please don't misunderstand; I'm not asking you to debug my network. There are actually two parts here, one is what the clients are/n't doing with the responses they receive, and that's sort of beside the point and came up incidentally, They aren't really experiencing any issues or p

Re: securing bind in todays hostile environment

2020-01-20 Thread N. Max Pierson
My terminology seems to be the issue here, so let me try and rephrase/elaborate : ) > I'm sure that you can get Ansible to add / remove / modify the list of zones > on the slave servers. But is that the best solution when BIND has something > built in for doing the same thing? I was not awar

Re: securing bind in todays hostile environment

2020-01-20 Thread N. Max Pierson
Ah, allow me to apologize then. Since I did not see any mention as to why you possibly didn’t think ansible would serve us well for this job I had wrongly assumed you to had maybe demo’d or just got handed the task of automating in your organization and didn’t have time to research or test it be