Re: Just a suspicion for now: Memory leak in 9.20.4?
> On 13 Feb 2025, at 14:46, Ondřej Surý wrote: > > There’s official KB article on the topic: > https://kb.isc.org/docs/bind-memory-consumption-explained - you actually need > to use jeprof and understand the BIND 9 internals. Thank you, I will check it out. I just sent the message wondering whether someone had seen something similar. It is a bit shocking given that 9.18 achieved better memory efficiency than the previous versions if I remember well. For now, what surprised me is: Server one, highest query load, mostly clients querying the typical A records. Server two, lower query load, pattern is different receiving lots of MX queries from mail servers. Both are running FreeBSD 14.2.. Bind compiled from ports. Server one: 9.18.32 boot time: Wed, 12 Feb 2025 14:04:42 GMT last configured: Fri, 14 Feb 2025 07:33:09 GMT VM size: 632 MB, RES 446MB Second two: 9.20.5 boot time: Thu, 13 Feb 2025 09:44:04 GMT last configured: Thu, 13 Feb 2025 10:33:47 GMT VM size: 1079MB, RES 945 MB. The “sizes” are those reported by top (different from the Linux version). I will keep monitoring and let you know. Borja. signature.asc Description: Message signed with OpenPGP -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
ECS subnet
Hi, I have a setup where I have a BIND resolver behind an unbound resolver. The reason is that when I originally set this up, there was no way to integrate an RPZ feed into unbound. It seems possible now but I haven’t really wanted to try it out…. Of course, this leads to the situation where the actual RPZ-log of the BIND server doesn’t have any other IPs than that of the unbound resolver above it. I thought that with the "send-client-subnet: 127.0.0.1“ configuration in unbound, I could „send“ at least the client subnet to BIND. But is it possible to show this in the logs? Rainer -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: ECS subnet
Hi. Is this a question about BIND, or Unbound? Note the name of the list. On Fri, 14 Feb 2025 at 16:36, Rainer Duffner wrote: > Hi, > > I have a setup where I have a BIND resolver behind an unbound resolver. > > The reason is that when I originally set this up, there was no way to > integrate an RPZ feed into unbound. > > It seems possible now but I haven’t really wanted to try it out…. > > > Of course, this leads to the situation where the actual RPZ-log of the > BIND server doesn’t have any other IPs than that of the unbound resolver > above it. > > I thought that with the "send-client-subnet: 127.0.0.1“ configuration in > unbound, I could „send“ at least the client subnet to BIND. > > But is it possible to show this in the logs? > > > > > Rainer > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: ECS subnet
> Am 14.02.2025 um 17:39 schrieb Greg Choules > : > > Hi. > Is this a question about BIND, or Unbound? > Note the name of the list. No, it’s a question about BIND. If an upstream resolver sends an ECS subnet (it’s in the packet header somewhere, from what I understand) - how can BIND show this in the logs? Rainer -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users