Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread brett smith
OK I have the source of the problem now I just need an elegant way to fix it and most cost ( Network TCP ) effective way to fix it The Windows Domain is responsible for X.internal.example.com and I am presently forwarding X.internal.example.com to their nameservers DC, resulting in TCP queries.

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Alan Clegg
On Oct 28, 2013, at 8:08 PM, brett smith brett.s9...@gmail.com wrote: OK I have the source of the problem now I just need an elegant way to fix it and most cost ( Network TCP ) effective way to fix it The Windows Domain is responsible for X.internal.example.com and I am presently

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Charles Swiger
Hi— On Oct 28, 2013, at 9:05 PM, Alan Clegg a...@clegg.com wrote: Slave X.internal.example.com +1; it’s also worth looking into why there is such a high volume of DNS queries. Is it simply a big network with a lot of chatty clients? Or is TTL turned down so low that client side caching is not

Re: Performance Tuning RHEL 5 and Bind

2013-10-24 Thread Carsten Strotmann
Hi, Kevin Darcy k...@chrysler.com writes: Are these queries mostly for names in an Active Directory domain? The default for Active Directory is for *every* Domain Controller to register NS records at the apex of the AD domain. Pretty soon, for any reasonably-sized AD infrastructure, all of

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Alan Clegg
On Oct 21, 2013, at 9:47 AM, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Fix your windows clients. You can't fix stupid. I have lots of windows clients and they don't exhibit this feature. There's something wrong on the windows clients and it's not the norm. To be honest,

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Mike Hoskins (michoski)
-Original Message- From: Alan Clegg a...@clegg.com Date: Tuesday, October 22, 2013 7:44 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Performance Tuning RHEL 5 and Bind On Oct 21, 2013, at 9:47 AM, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Fix

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Kevin Darcy
Are these queries mostly for names in an Active Directory domain? The default for Active Directory is for *every* Domain Controller to register NS records at the apex of the AD domain. Pretty soon, for any reasonably-sized AD infrastructure, all of those NSes cause *all* queries for *any* name

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread brett smith
October 2013 12:35 PM To: sth...@nethelp.no Cc: bind-users@lists.isc.org Subject: Re: Performance Tuning RHEL 5 and Bind When all the Windows PC's are switched to our resolver, bind stops responding. rndc querylog shows queries coming thru, I changed tcp-clients from 1000 to 1 but DNS seems

Re: Performance Tuning RHEL 5 and Bind

2013-10-22 Thread Alan Clegg
On Oct 22, 2013, at 8:29 PM, brett smith brett.s9...@gmail.com wrote: Yes tuning off IPTABLES conn-tracking makes a huge difference. I also followed: https://access.redhat.com/site/solutions/304713 https://access.redhat.com/site/solutions/168483 I still see some SYN_SENT from Windows

Re: Performance Tuning RHEL 5 and Bind

2013-10-21 Thread WBrown
From: Alan Clegg a...@clegg.com Fix your windows clients. You can't fix stupid. Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If

RE: Performance Tuning RHEL 5 and Bind

2013-10-21 Thread Lightner, Jeff
- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of wbr...@e1b.org Sent: Monday, October 21, 2013 9:47 AM To: bind-users@lists.isc.org Subject: Re: Performance Tuning RHEL 5 and Bind From: Alan Clegg

Re: Performance Tuning RHEL 5 and Bind

2013-10-20 Thread Steven Carr
On 20 October 2013 02:34, brett smith brett.s9...@gmail.com wrote: When all the Windows PC's are switched to our resolver, bind stops responding. rndc querylog shows queries coming thru, I changed tcp-clients from 1000 to 1 but DNS seems lagging, so we switched back to the original

Re: Performance Tuning RHEL 5 and Bind

2013-10-20 Thread Alan Clegg
On Oct 19, 2013, at 9:34 PM, brett smith brett.s9...@gmail.com wrote: When all the Windows PC's are switched to our resolver, bind stops responding. What does stops responding mean? Any logs? rndc querylog shows queries coming thru, I changed tcp-clients from 1000 to 1 but DNS seems

RE: Performance Tuning RHEL 5 and Bind

2013-10-20 Thread Stuart Browne
Subject: Re: Performance Tuning RHEL 5 and Bind When all the Windows PC's are switched to our resolver, bind stops responding. rndc querylog shows queries coming thru, I changed tcp-clients from 1000 to 1 but DNS seems lagging, so we switched back to the original Windows Domain resolver

Re: Performance Tuning RHEL 5 and Bind

2013-10-19 Thread sthaug
I need to build a pair DNS cache servers to support 5000+ clients ( PC's and Servers ). I have been looking for some guides on tuning BIND and the OS for Enterprise performance rather than the defaults. The version of bind is bind-9.8.2. 5000 clients is such a low number that I don't think