Re: [Pdns-users] public DoH/DoT dnsdist 1.9.8 exited on signal 11

2025-02-01 Thread Winfried via Pdns-users
Hello Christoph, My two cents. Because crashes with dnsdist are really very unusual, I wouldn't rule out hardware errors. Especially because we've had that happen ourselves. In the end, bad memory was the cause of rare crashes. So I would recommend rebooting the server a few times, checking the

Re: [Pdns-users] PowerDNS Recursor server stopped resolving about half of all domains last night; I built a new server and it's doing the same thing

2024-12-29 Thread Winfried via Pdns-users
Hi Nicholas, >Ultimately, a comment on this page[1] about Comcast's "SecurityEdge" product >helped me, after beating my head against the wall for more than 12 hours over >this. I logged into my Comcast Business account, went to my internet service >tab, scrolled to the bottom, and disabled th

Re: [Pdns-users] DNSBomb

2024-06-03 Thread Winfried via Pdns-users
Hello Kilian, >> Are there any recommended settings for auth or dnsdist for mitigation such >> attacks? >When using dnsdist before a recursor, you could apply client rate limiting >to further protect against this and similar attacks. see https://dnsdist.org/guides/dynblocks.html https://dns

Re: [Pdns-users] Recursor getting pegged at 100% CPU

2024-03-15 Thread Winfried via Pdns-users
Hi Tim, Is there anything unusual in the stdout of the recursor container? Winfried Am 15. März 2024 17:01:59 MEZ schrieb Tim Burns via Pdns-users : >Hello all, I’m experiencing a performance degradation while using the Recursor >that I haven’t been able to root cause, and I was hoping to ge

Re: [Pdns-users] Share DNS-Records between two zones/views (internal & external)

2023-11-15 Thread Winfried via Pdns-users
> I am considering migrating my current BIND-Based setup to PowerDNS. May I ask why? Winfried ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Recursor Cache Sizing: Is more always better?

2023-09-12 Thread Winfried via Pdns-users
Hello Christoph, On 12.09.23 13:35, Christoph via Pdns-users wrote: Hi Winfried, My recommendation is to limit the TTL to 12 or 6 hours and find out how many cache entries are created during this time. Increase that by 50% and that's your value. thanks for your recommendation. I've played a

Re: [Pdns-users] Recursor Cache Sizing: Is more always better?

2023-09-09 Thread Winfried via Pdns-users
Hi Christoph, My recommendation is to limit the TTL to 12 or 6 hours and find out how many cache entries are created during this time. Increase that by 50% and that's your value. You'll see that it doesn't require that much memory space. Winfried Am 9. September 2023 09:15:04 MESZ schrieb Chr