Re: Just a suspicion for now: Memory leak in 9.20.4?

2025-02-14 Thread Borja Marcos via bind-users


> On 13 Feb 2025, at 14:46, Ondřej Surý  wrote:
> 
> There’s official KB article on the topic: 
> https://kb.isc.org/docs/bind-memory-consumption-explained - you actually need 
> to use jeprof and understand the BIND 9 internals.

Thank you, I will check it out.

I just sent the message wondering whether someone had seen something similar. 
It is a bit shocking given that 9.18 achieved better memory efficiency than the
previous versions if I remember well. 

For now, what surprised me is:

Server one, highest query load, mostly clients querying the typical A records.

Server two, lower query load, pattern is different receiving lots of MX queries 
from mail servers.

Both are running FreeBSD 14.2.. Bind compiled from ports.

Server one:  9.18.32
boot time: Wed, 12 Feb 2025 14:04:42 GMT
last configured: Fri, 14 Feb 2025 07:33:09 GMT
VM size: 632 MB, RES 446MB

Second two:  9.20.5
boot time: Thu, 13 Feb 2025 09:44:04 GMT
last configured: Thu, 13 Feb 2025 10:33:47 GMT
VM size: 1079MB, RES 945 MB.


The “sizes” are those reported by top (different from the Linux version).

I will keep monitoring and let you know.






Borja.



signature.asc
Description: Message signed with OpenPGP
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


ECS subnet

2025-02-14 Thread Rainer Duffner
Hi,

I have a setup where I have a BIND resolver behind an unbound resolver.

The reason is that when I originally set this up, there was no way to integrate 
an RPZ feed into unbound.

It seems possible now but I haven’t really wanted to try it out….


Of course, this leads to the situation where the actual RPZ-log of the BIND 
server doesn’t have any other IPs than that of the unbound resolver above it.

I thought that with the "send-client-subnet: 127.0.0.1“ configuration in 
unbound, I could „send“ at least the client subnet to BIND.

But is it possible to show this in the logs?




Rainer
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ECS subnet

2025-02-14 Thread Greg Choules via bind-users
Hi.
Is this a question about BIND, or Unbound?
Note the name of the list.

On Fri, 14 Feb 2025 at 16:36, Rainer Duffner  wrote:

> Hi,
>
> I have a setup where I have a BIND resolver behind an unbound resolver.
>
> The reason is that when I originally set this up, there was no way to
> integrate an RPZ feed into unbound.
>
> It seems possible now but I haven’t really wanted to try it out….
>
>
> Of course, this leads to the situation where the actual RPZ-log of the
> BIND server doesn’t have any other IPs than that of the unbound resolver
> above it.
>
> I thought that with the "send-client-subnet: 127.0.0.1“ configuration in
> unbound, I could „send“ at least the client subnet to BIND.
>
> But is it possible to show this in the logs?
>
>
>
>
> Rainer
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: ECS subnet

2025-02-14 Thread Rainer Duffner


> Am 14.02.2025 um 17:39 schrieb Greg Choules 
> :
> 
> Hi.
> Is this a question about BIND, or Unbound?
> Note the name of the list.



No, it’s a question about BIND.

If an upstream resolver sends an ECS subnet (it’s in the packet header 
somewhere, from what I understand) - how can BIND show this in the logs?



Rainer
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users