Re: Deprecated DSCP support

2024-02-29 Thread Evan Hunt
On Thu, Feb 29, 2024 at 10:34:42AM +0100, Borja Marcos wrote: > But bear in mind that this is only guaranteed to work inside your > network/ASN. It’s not unusual to scrub DSCP at the network border. Same problem would also apply to DSCP values set internally by named, of course. -- Evan Hunt --

Re: Deprecated DSCP support

2024-02-29 Thread Robert Franklin
Hello, > On 29 Feb 2024, at 09:34, Greg Choules via bind-users > wrote: > > But regarding your comment "It’s not easy for the network to guess the > requirements of an application," I would disagree. Traffic classification and > setting of DSCP values is something that edge routers have been

Re: Deprecated DSCP support

2024-02-29 Thread G.W. Haywood
Hi there, On Thu, 29 Feb 2024, Wolfgang Riedel wrote: In my case it?s dscp 24 in named.conf ... If you don't set it, ... ns9:~# >>> man named.conf | grep dscp dscp ; // obsolete -- 73, Ged. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: Deprecated DSCP support

2024-02-29 Thread Borja Marcos
> On 29 Feb 2024, at 10:21, Petr Špaček wrote: > > On 28. 02. 24 13:50, Balazs Hinel (Nokia) via bind-users wrote: >> I am working on a product in Nokia, and we currently use BIND provided by >> Rocky Linux 8 with security patches. Recently the requirement came that we >> should upgrade to at

Re: Deprecated DSCP support

2024-02-29 Thread Greg Choules via bind-users
Hi Wolfgang. Firstly let me say that I have never been a fan of QoS. So I'm slightly biased against the whole thing in the first place. But regarding your comment "It’s not easy for the network to guess the requirements of an application," I would disagree. Traffic classification and setting of DS

Re: Deprecated DSCP support

2024-02-29 Thread Ondřej Surý
How does that actually help with anything? The DNS traffic is not one way, but two way and unless everyone is setting DSCP on the DNS messages the incoming DNS messages will have same priority as incoming FTP traffic (to use your example).Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your

Re: Deprecated DSCP support

2024-02-29 Thread Petr Menšík
What I do not understand is, why is not matching always port 53 either on source ports or destination ports as enough to set dscp marks. Unless you need to differentiate dscp based on domain names, used views or something similar, iptables rules should be able to set dscp very similar way. With

Re: Deprecated DSCP support

2024-02-29 Thread Petr Špaček
On 28. 02. 24 13:50, Balazs Hinel (Nokia) via bind-users wrote: I am working on a product in Nokia, and we currently use BIND provided by Rocky Linux 8 with security patches. Recently the requirement came that we should upgrade to at least 9.16. During the testing of this version we realized th

Re: Deprecated DSCP support

2024-02-29 Thread Wolfgang Riedel via bind-users
Hi Folks, OK let me help you a bit as it’s really essential for DNS traffic which need to be go through in all situations!!! Within the OS networking stack as also within the network there is always a prioritisation of packets within the queues to serialise the packets of an application to go

Re: Deprecated DSCP support

2024-02-29 Thread Stacey Marshall
Not familiar with DSCP, Differentiated Services Code Point, a means of classifying and managing network traffic and of providing quality of service (QoS) in modern IP networks [D]. Google search found me a libuv conversation `Setting DSCP per UDP datagram` [A] which links to `Extending the u

Re: Deprecated DSCP support

2024-02-28 Thread Petr Menšík
We may want to help fixing DSCP features, but I personally do not know any usage, where this feature would be used and what for exactly. Recent bind9 uses libuv to back its network core, instead of custom networking core maintained by ISC. But I haven't found any trace of DSCP support at libuv

Deprecated DSCP support

2024-02-28 Thread Balazs Hinel (Nokia) via bind-users
Hi, I am working on a product in Nokia, and we currently use BIND provided by Rocky Linux 8 with security patches. Recently the requirement came that we should upgrade to at least 9.16. During the testing of this version we realized that a feature we used, DSCP, has stopped working. Reading abou