Re: unbound performance

2012-11-06 Thread Michel Blais
Nothing wrong, I normally use bind so I just didn't think of make each service listen at different address. Double face palm at myself lol. Thanks Stuart, that what I will do. Michel Le 2012-10-30 19:23, Stuart Henderson a écrit : What's wrong with binding NSD to one IP address for authoritat

Re: unbound performance

2012-10-30 Thread Stuart Henderson
On 2012-10-26, Michel Blais wrote: > we must leave the DNS resovler allowed to everyone. This is a *really* *really* bad idea. Since people started publishing dnssec-bloated zones, open DNS resolvers became a massive UDP packet amplification vector. > Since we are a small ISP, we also receive r

Re: unbound performance

2012-10-26 Thread Michel Blais
Le 2012-10-26 06:48, Martin Pelikan a écrit : 2012/10/25 Michel Blais : Hi, I'm trying to make unbound have less timeout query (I see around1 to 2% of query timeout using DNS performance test from Silverwolf Software and was looking at "Unbound : Howto optimise" and wanted to try the so-rcvbuf