Re: Recursive bind becomes unresponsive with high load

Hello Mathew, On Sat, Apr 02, 2016 at 03:16:59PM +0200, Michael Brunnbauer wrote: > > # watch -n 0.1 'cat /proc/net/udp | grep ":0035 : "' > > I can see the error count on the lo interface growing when the queue is at > > :00040200 I should have guessed that restarting bin

Re: dnssec-signzone retains obsolete signatures

> While this is not a problem for BIND to load the zone it seems > unexpected to me. Should dnssec-signzone not remove obsolete signatures? Found out that this issue is fixed in BIND 9.11.0a1: 4305. [bug]dnssec-signzone was not removing unnecessary rrsigs from the zone's apex.

Re: Recursive bind becomes unresponsive with high load

Hello Mike, connection tracking does not seem to be the issue here. I see no messages about packets dropped from the kernel and I have not loaded the relevant modules (iptable_nat, ip_conntrack, etc.) anyway. Regards, Michael Brunnbauer On Fri, Apr 01, 2016 at 09:48:01PM +, Mike Mitchell w

Re: Recursive bind becomes unresponsive with high load

Hello Mathew, On Sat, Apr 02, 2016 at 12:02:38AM +, Mathew Ian Eis wrote: > * You can check for dropped packets on the receive path with # netstat -u -s > High numbers on "packet receive errors??? can indicate an overflow in the > receive buffer - this is fixable by network stack tuning as M

Re: multi zone forward ?

On 01.04.16 15:59, lejeczek wrote: Is it possible with ISC to forward multiple zones to one(or a few) forwarders without declaring each zone separately? only by forwarding everything, with probable exceptions Something like with "view" or "policy" ? if you can define view where clients belon