Re: TTLs on A records?

2009-04-30 Thread Barry Margolin
In article , "online-reg" wrote: > Hi All: I'm running Bind 9.5.0-P1 / Fedora on my primary NS. > > Are TTLs on individual A records universally supported? They're supposed to be. Many DNS-based load balancing systems and services depend on it. > > I have a domain with a TTL of "3h", and

Re: slave transfer problems

2009-04-30 Thread Barry Margolin
In article , Scott Haneda wrote: > On Apr 29, 2009, at 5:03 PM, Barry Margolin wrote: > > > In article , > > Scott Haneda wrote: > >> > >> > >> like my machine, .14 is refusing their refresh request. Do I need to > >> allow-recursion for their NS0? > > > > No, you shouldn't need allow-recursi

Re: Scale BIND over multiple kernels effectively

2009-04-30 Thread JINMEI Tatuya / 神明達哉
At Thu, 30 Apr 2009 15:41:03 -0700, Jonathan Petersson wrote: > in light of this is it possible to tell BIND how many threads it > should utilize or is it a ALL or ONE case? Do you mean the -n command line option? usage: named [-4|-6] [-c conffile] [-d debuglevel] [-f|-g] [-n number_of_cpus]

Re: Scale BIND over multiple kernels effectively

2009-04-30 Thread Jonathan Petersson
Thanks for the feedback, > 2 threads on 2 core: 45kqps > 4 threads on 4 core: 108kkqps > 8 threads on 4 core + HT: 75kqps > 16 threads on 8 core + HT: 35kqps > > correct? yes in light of this is it possible to tell BIND how many threads it should utilize or is it a ALL or ONE case? /Jonathan __

TTLs on A records?

2009-04-30 Thread online-reg
Hi All: I'm running Bind 9.5.0-P1 / Fedora on my primary NS. Are TTLs on individual A records universally supported? I have a domain with a TTL of "3h", and I wanted to route traffic between two servers in that domain quickly, so I set the TTL to the A record like: www300A123.123

Re: Scale BIND over multiple kernels effectively

2009-04-30 Thread JINMEI Tatuya / 神明達哉
At Thu, 30 Apr 2009 11:46:05 -0700, Jonathan Petersson wrote: > I've been running some dnsperf tests on a couple of servers I have > resulting in some interesting behaviors. [...] > Any input would be valuable, thanks! Roughly summarizing (ignoring many details), what you showed is: 2 threads

Re: Zone transfers with views

2009-04-30 Thread Stephen Carville
On Thu, Apr 30, 2009 at 10:20 AM, Kevin Darcy wrote: > > Use TSIG keys to differentiate the views. > I'll give that a try. Thank you. -- Stephen Carville ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Scale BIND over multiple kernels effectively

2009-04-30 Thread Jonathan Petersson
Hi all, I've been running some dnsperf tests on a couple of servers I have resulting in some interesting behaviors. The test-bed that I have is 3 servers with the following CPUs: E3110 (DC @ 3.00GHz), i7 920 (QC 2...@3.20ghz) and E5520 (Dual QC @ 2.27GHz), RAM is 6GB on each running at 800-1.6GHz

Re: Zone transfers with views

2009-04-30 Thread Kevin Darcy
Stephen Carville wrote: I am trying to create three DNS slave servers with views for internal an external IP's. Each has an address in the DMZ and the firewall (actually a CSS) routes requests from the external IP's to the internal addresses. The correspondence is one-to-one: external.1 <--> d

Zone transfers with views

2009-04-30 Thread Stephen Carville
I am trying to create three DNS slave servers with views for internal an external IP's. Each has an address in the DMZ and the firewall (actually a CSS) routes requests from the external IP's to the internal addresses. The correspondence is one-to-one: external.1 <--> dmz.1 external.2 <--> dmz.2

Re: nsupdate delete question

2009-04-30 Thread Niall O'Reilly
On Thu, 2009-04-30 at 10:18 -0400, James M wrote: > trying to > delete a nonexistant host does not return an error. That seems reasonable to me, since the state of the zone file after the transaction is indeed the state which would be expected, had the host been present and

Re: nsupdate delete question

2009-04-30 Thread Chris Thompson
On Apr 30 2009, James M wrote: While invoking nsupdate within a program I notice that trying to delete a nonexistant host does not return an error. That's a result of the way that RFC 2136 defined update operations. Read section 3, and note in particular that errors are never generated in 3.4.

nsupdate delete question

2009-04-30 Thread James M
Hi- While invoking nsupdate within a program I notice that trying to delete a nonexistant host does not return an error. Same thing seems to happen from the command line which I will show next.. [r...@mandy4 ccadns]# nslookup mandy11.example.com Server: 204.62.134.38 Address:204.62

Re: stop zone transfers from coming in

2009-04-30 Thread Sam Wilson
In article , Chris Henderson wrote: > My server works as a secondary for a zone. I asked the master server's > admin to stop the zone transfer; I didn't get any reply and thus > commented out the zone's section in my named.conf. But I'm still > getting zone files coming in to my server. > > Her

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 3:54 AM, Kal Feher wrote: Lets check where they are delegated: 1st the hostwizard domain $ dig ns hostwizard.com +short ns1.hostwizard.com. ns1.nacio.com. Now nacio $ dig ns nacio.com +short ns1.nacio.com. ns3.nacio.com. ns2.nacio.com. So what _should_ we see if I query ns1

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 2:44 AM, Noel Butler wrote: On Thu, 2009-04-30 at 19:38, Scott Haneda wrote: On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: > When I clicked on that link the only error was an MNAME error. Did > you see > another error? (I wonder if it was a transient error you observed, >

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Kal Feher
Firstly I should say that I agree with those who think the tool is a little suspect in its efficacy. I tried a few domains under some cctlds and it appears as if the code assumes only GTLDs. Nevertheless, it may be instructive to describe what you saw Scott. You have 2 name servers: $ dig ns newge

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Sten Carlsen
I get the same error when checking my own domain. A check with dig results in proving that the tool is wrong. Scott Haneda wrote: > On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: > >> When I clicked on that link the only error was an MNAME error. Did >> you see >> another error? (I wonder if it was

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Noel Butler
On Thu, 2009-04-30 at 19:38, Scott Haneda wrote: > On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: > > > When I clicked on that link the only error was an MNAME error. Did > > you see > > another error? (I wonder if it was a transient error you observed, > > because > > it appears different to

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: When I clicked on that link the only error was an MNAME error. Did you see another error? (I wonder if it was a transient error you observed, because it appears different to yours). The error according to the report (run against isc.org): "ERROR

RE: request timeout

2009-04-30 Thread Jeff Pang
> Original Message > Subject: Re: request timeout > From: JINMEI Tatuya / 神明達哉 > Date: Wed, April 29, 2009 5:26 pm > To: "Jeff Pang" > Cc: bind-users@lists.isc.org > > > At Tue, 28 Apr 2009 00:42:29 -0700, > "Jeff Pang" wrote: > > > When a Bind requests another Bind for a

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Kal Feher
When I clicked on that link the only error was an MNAME error. Did you see another error? (I wonder if it was a transient error you observed, because it appears different to yours). The error according to the report (run against isc.org): "ERROR: Your SOA (Start of Authority) record states that yo

Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
Someone pointed me to this http://thednsreport.com/?domain=isc.org I am not a huge fan of these checking tools, this one has me curious. My domain of course has the same error, which is a little comforting, sine I am in good company :) What is this error asking of me, they are wanting in my c