Re: BIND and UDP tuning

2018-09-28 Thread Blake Hudson
Alex wrote on 9/26/2018 11:52 AM: This is all now running on a 165/35 cable system. Early in this thread or another, I provided a packet trace that showed what appears to me to never have received the replies - it just times out. It looks like there are periods of as many as 500 querie

Re: BIND and UDP tuning

2018-09-28 Thread Alan Clegg
On 9/28/18 9:26 AM, Alex wrote: >> Has your provider enabled qos? I'd bet their dropping packets that >> exceed qos rate limits would be considered "working as expected". > > I asked and they had no idea what that even meant. The technician that > was here replacing the modem also had no idea ou

Re: BIND and UDP tuning

2018-09-28 Thread Lee
On 9/28/18, Alex wrote: > Hi, > > On Fri, Sep 28, 2018 at 12:18 AM Lee wrote: >> >> On 9/27/18, Alex wrote: >> > Hi, >> > >> >> Just a wild thought: >> >> It works with a lower speed line (at least I read it that way) but has >> >> problems with higher speeds. >> >> Could it be that the line is

Re: BIND and UDP tuning

2018-09-28 Thread Alex
Hi, On Fri, Sep 28, 2018 at 12:18 AM Lee wrote: > > On 9/27/18, Alex wrote: > > Hi, > > > >> Just a wild thought: > >> It works with a lower speed line (at least I read it that way) but has > >> problems with higher speeds. > >> Could it be that the line is so fast that it "overtakes" the host i

Re: BIND and UDP tuning

2018-09-28 Thread Alex
Hi, > Hi Alex, > > Have you tried on a separate physical server? To rule out the actual hardware > as being the problem? > > Is this some user grade PC with either onboard or external ethernet > interface, or a proper server grade equipment? Age of equipment? What else > does that machine do?

Re: Root zone DNSSEC KSK rollover event - 2018/10/11, 16:00 UTC

2018-09-28 Thread Ray Bellis
On 28/09/2018 10:55, Anand Buddhdev wrote: > On 11 October, the old key won't be removed. On that day, the new key > will start signing the DNSKEY RRset. The old key (id 19036), will remain > in the root zone; it just won't sign the DNSKEY RRset. Eventually, in > the first quarter of 2019, it will

Re: Root zone DNSSEC KSK rollover event - 2018/10/11, 16:00 UTC

2018-09-28 Thread Anand Buddhdev
On 28/09/2018 11:37, Ray Bellis wrote: Hi Ray, > At this time the old key will be removed from the root zone leaving only > the new key (id 20326) in the zone. If your DNS servers don't know and > trust the new key at that point then DNSSEC validation errors will occur. On 11 October, the old k

Root zone DNSSEC KSK rollover event - 2018/10/11, 16:00 UTC

2018-09-28 Thread Ray Bellis
This is a reminder for users of BIND that the most critical phase of the rollover of the root zone's DNSSEC KSK is scheduled to happen at 16:00 UTC on Thursday 11th October. At this time the old key will be removed from the root zone leaving only the new key (id 20326) in the zone. If your DNS se

Re: bind-9-packages: RPS and both '--enable-static' and '--disable-static'?

2018-09-28 Thread Michał Kępień
Hi James, > Thank you for the https://www.isc.org/blogs/bind-9-packages/ > blog post and various binary distributions mentioned in it. > > I am an end user, not a programmer, and I rely on Linux > distributions and application packages and so having up-to-date > content from authoritative sources