Re: replication time for dynamic records from primary to secondary servers

2021-03-30 Thread Stuart@registry.godaddy


On 31/3/21, 8:00 am, "bind-users on behalf of John Thurston" 
 wrote:


On 3/30/2021 12:30 PM, Cuttler, Brian R (HEALTH) via bind-users wrote:
> We are seeing a delay in the primary DNS server updating the secondary 
and would like to shorten that interval.

Can you post the pertinent bits of your primary's and secondary's config
for the zone?

In the absence of that, I pose a few questions:

How long is it taking now?
What is your target interval?

Do you have NOTIFY enabled on the primary?
How large is the zone?
If you look in the log, do you see XFRs queuing?
How many secondaries are there?
Do you have limits defined on the number of simultaneous transfers?

Additional question, do you have "notify-delay" defined?

Stuart

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: replication time for dynamic records from primary to secondary servers

2021-03-30 Thread John Thurston



On 3/30/2021 12:30 PM, Cuttler, Brian R (HEALTH) via bind-users wrote:

We are seeing a delay in the primary DNS server updating the secondary and 
would like to shorten that interval.


Can you post the pertinent bits of your primary's and secondary's config 
for the zone?


In the absence of that, I pose a few questions:

How long is it taking now?
What is your target interval?

Do you have NOTIFY enabled on the primary?
How large is the zone?
If you look in the log, do you see XFRs queuing?
How many secondaries are there?
Do you have limits defined on the number of simultaneous transfers?

--
Do things because you should, not just because you can.

John Thurston907-465-8591
john.thurs...@alaska.gov
Department of Administration
State of Alaska
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


replication time for dynamic records from primary to secondary servers

2021-03-30 Thread Cuttler, Brian R (HEALTH) via bind-users
Zone replication question.

I'm sure the answer is out there, but I'm not performing the right (google) 
query.

My DDNS is working wonderfully, DHCP server updating primary DNS server.

We are seeing a delay in the primary DNS server updating the secondary and 
would like to shorten that interval.

If someone would help me find the right switch I'd love to update my config.

Currently running bind 9.9.4 on Centos 7 (I see an Ubuntu platform in my 
future).

Thanks in advance,

Brian


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: 9.16.13 overwrote master files

2021-03-30 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Tue, 2021-03-30 at 15:45 +1100, Mark Andrews wrote:

> can you add a "#" in front of "dnssec-policy" in bin/named/config.c
> and see how that goes for you.  That will comment out the default
> 'dnssec-policy "none";'.

I have not been able to reproduce this in a disposable centos 8 VM,
using the same /etc/named.conf and /var/named contents from the
production server. If I cannot make that work, I will try reproducing
the error on the production server tomorrow. Once I get a reproducible
scenario, I will try your above patch.


-BEGIN PGP SIGNATURE-

iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGOI7xUcY2FybEBmaXZl
LXRlbi1zZy5jb20ACgkQL6j7milTFsHU1QCgi6yeu2Yls19f/406zWLIoqo3/QMA
nA4PFkv1wnI089pW+VFch454UoLg
=hTUy
-END PGP SIGNATURE-


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users