Correct response to NS request in case of dual delegation when one delegation returns REFUSED

Hello, We are currently working with a product called Superna Eyeglass which can be used for DR purposes on Powerscale (Dell storages). Quick background: Powerscale leverages DNS to create redundant and load-balanced frontend access. Without going into many details, Powerscale replies to DNS

Re: Correct response to NS request in case of dual delegation when one delegation returns REFUSED

Hi, > 1) client asks Bind: what is NS for "cluster"? > 2) Bind seems to issue requests to both "storage1" and "storage2" for "NS > cluster", one of which always returns "REFUSED" > 3) Answer of Bind to client does not contain the one that was "refused". no, I think it’s different problem. Both

Re: High memory consumption in bind 9.18.2

Hello, Please find the details below. Free command is used to check RAM available/used. space used is 50GB on RHEL 7.9 in bind version 9.18.2 whereas in bind version 9.16.10 RAM space used is 44 GB with the same amount of data and configuration. free -g totalused

Re: Only one DS key comes back in query

On Mon, May 16, 2022 at 2:41 PM frank picabia wrote: > I've been using open source for decades. Long enough that I rarely need > to use lists for help. > > Here's the RFC mentioning reserved domain name use: > https://www.rfc-editor.org/rfc/rfc2606.html > Those reservations are for testing and

Re: AW: High memory consumption in bind 9.18.2

I would be very interested in hearing more! In majority of our internal testing 9.16 has higher memory consumption than 9.18, especially when 9.18 is compiled with libjemalloc. And the differences are not small, for some configurations it can be even 2x or 3x more on 9.16 than it is on 9.18.

Re: High memory consumption in bind 9.18.2

Also please note that proper measurement of memory consumption is needed. There’s some good (semi-accurate) stuff at SO and it needs to be correlated with the statschannel output from named. Running “free” doesn’t measure memory consumption by any program. Ondřej -- Ondřej Surý — ISC (He/Him)

Re: Only one DS key comes back in query

I suspect that you failed to copy the complete second record or that the registrar failed to handle the optional white space in the last field. Without you posting the contents of the dsset file and what you passed to the registrar there is no way to know. There is also no way to know if it wa

AW: AW: High memory consumption in bind 9.18.2

Can you please provide some commands whose output you are interested? I want to collect the statistics for 9.16 before updating to 9.18. Thanks Klaus > -Ursprüngliche Nachricht- > Von: bind-users Im Auftrag von Petr > Špacek > Gesendet: Mittwoch, 18. Mai 2022 18:20 > An: bind-users@lists

Re: High memory consumption in bind 9.18.2

Hi Klarstein, Gathering the output of named statschannel should be good enough for initial assessment (json please). For 9.18, make sure the jemalloc is being used at runtime. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obl

DNSSEC problem with our zone

Dear All, In the past three days I have just made our domain DNSSEC signed. However, I seem to be missing something. When I query other DNS servers, like CloudFlare 1.0.0.1, I get the "ad" flag. But in my own domain, and my own domain servers, the "ad" flag is still missing: root@domac:/

Re: DNSSEC problem with our zone

Mirsad Goran Todorovac writes: > Dear All, > > In the past three days I have just made our domain DNSSEC > signed. However, I seem to be missing something. > > When I query other DNS servers, like CloudFlare 1.0.0.1, I get the > "ad" flag. > > But in my own domain, and my own domain servers, the