Re: zone transfer delay

2018-09-21 Thread project722
Yes, I seem to be learning that the hard way:) My shop is still on Bind 9.8.2 (Red Hat) on our authoritative servers. These new features in 9.11 are nice! On Fri, Sep 21, 2018 at 4:29 PM Reindl Harald wrote: > > Am 21.09.18 um 20:01 schrieb project722: > > Are you saying do a zone xfer then chec

Re: zone transfer delay

2018-09-21 Thread project722
Ok, is this something new to the later BIND versions? I'm looking on our authoritative servers running the red hat bind 9.8.2 and do not see any .jnl files. Also, I made a zone transfer and ran a dig axfr rpz-local @ipaddress and it returned the updated data, while the file remained unchanged. (fo

Re: zone transfer delay

2018-09-21 Thread Tony Finch
project722 wrote: > Sounds like to me you are saying that the server would return the updated > data, because its in the journal file, regardless of whether its made it > into the regular zone file yet. Yes, that's how it works. Tony. -- f.anthony.n.finchhttp://dotat.at/ South Fitzroy: Var

Re: zone transfer delay

2018-09-21 Thread project722
Are you saying do a zone xfer then check the slave with the commands above to see what it actaully returns? Instead of checking the file itself? Sounds like to me you are saying that the server would return the updated data, because its in the journal file, regardless of whether its made it into th

Re: zone transfer delay

2018-09-21 Thread Tony Finch
project722 wrote: > But the slave still takes @15 minutes for the new data to get populated > in the file. Use `dig axfr` or `named-compilezone -j` to get the server's view of the zone. Zone updates are written to a journal and are not incorporated into the zone file immediately. Tony. -- f.an

Re: zone transfer delay

2018-09-21 Thread project722
I've added those 2 lines to the master in the zone info section. It seemed to have helped with the delay with the server announcing the change and initiating the xfer-out. But the slave still takes @15 minutes for the new data to get populated in the file. On Fri, Sep 21, 2018 at 9:09 AM Reindl Ha

zone transfer delay

2018-09-21 Thread project722
I've got two recursive dns servers running ISC 9.11 and 9.12. We are using RPZ and I have a whitelist/blacklist exception zone file on both servers. I need the ability to change it only on one server and have it propogate to the other servers. My config is working, but I'm getting some delays that