Hi Eli,
On 03.08.22 01:43, eli glynn via Pdns-users wrote:
I've recently inherited a really ugly mess at my company, involving a
muddle of PowerDNS, Route53, NS1, and just about every mixed up
interaction you could imagine between them all.
The biggest part of the jumble is the way PowerDNS w
Hello Vinicius,
You can do that with Lua records. createReverse(), createForward(),
createReverse6() and createForward6() can be used to create generic records.
Here is a good starting point:
https://doc.powerdns.com/authoritative/lua-records/functions.html#reverse-dns-functions
Winfried
On
Hello Markus,
The Authoritative nameservers does not talk to your Recursors (timeouts):
Feb 2 08:33:39 ns1 pdns_recursor[916]: ws.igspn.com: Trying IP
62.128.193.35:53, asking 'ws.igspn.com|A'
Feb 2 08:33:39 ns1 pdns_recursor[916]: ws.igspn.com: timeout resolving
after 1574.81msec
Feb 2 08:
7.0.0.1)
;; WHEN: Thu Feb 02 11:47:05 CET 2023
;; MSG SIZE rcvd: 30
root@TESTSERVER:~#
best regards,
Markus
-Ursprüngliche Nachricht-
Von: Pdns-users Im Auftrag von
Winfried Angele via Pdns-users
Gesendet: Donnerstag, 2. Februar 2023 11:29
An
: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Feb 02 11:47:05 CET 2023
;; MSG SIZE rcvd: 30
root@TESTSERVER:~#
best regards,
Markus
-Ursprüngliche Nachricht-
Von: Pdns-users Im Auftrag
von Winfried Angele via Pdns-users
Gesendet: Donnerstag, 2. Februar 2023 11:29
An
Hello Otto,
Am 3. März 2020 10:33:11 MEZ schrieb Otto Moerbeek via Pdns-users
>...
>* When the recursor is started by systemd, the recursor will no longer
>run as the root user. Instead, it will start as the pdns-recursor user.
>Make sure directories and files needed by your specific recursor s
Interesting research:
https://rp.delaat.net/2019-2020/p78/report.pdf
Does that mean, we need to have different
udp-truncation-threshold and edns-outgoing-bufsize
settings for IPv4 and IPv6?
Regards
Winfried
___
Pdns-users mailing list
Pdns-users@ma
Hi Mira,
Yes the Recursor does no retry on *this* auth. But it tries on the other
nameservers from the NS RR set. IPv4 and IPv6. So if you have only one auth,
Recursor tries two times, IPv4 and IPv6 if available.
Winfried
Am 18. September 2020 14:47:49 MESZ schrieb Mira Krejci via Pdns-users
Hi Mira,
I think if a Resolver retries on possibly overloaded or attacked authoritative
DNS servers, it gets even worse for them. So I'd recommend to try to contact
the people in charge for that domain and try to convince them to solve the
problem on their side. And again, the Recursor tries on
> but an unsatisfied client will still query again.
Yes, but the Recursor will answer this client retries with SERVFAIL for
seconds without asking the Auth again. And it will
not ask an unresponsive Auth for seconds.
Winfried
Am 21. September 2020 15:14:49 MESZ schrieb Mira Krejci via Pdns-
Hi Marcello,
It looks like this is the same issue which I reported already:
https://github.com/PowerDNS/pdns/issues/9112
Maybe you can report your observations there as well.
Winfried
Am 28. Dezember 2020 21:41:21 MEZ schrieb Marcello Lupo via Pdns-users
:
>Hello,
>I have configured a PDNS A
Hello Marcello,
Verry good! But in my opinion the DNS server should not send out SOA queries
faster than it can pickup the answers. Raising the buffers helps only up to a
certain burst length. If you have more zones, the problem comes back.
Winfried
Am 29. Dezember 2020 09:17:06 MEZ schrieb
Does this only happen with DoH frontends? Did you try with UDP frontends as
well? Sounds like a bottleneck on your backends imo.
Winfried
Am 23. Juli 2021 13:32:39 MESZ schrieb Yannis via Pdns-users
:
>hello,
>
>We're using dnsdist (1.5.1 on Ubuntu 20.04, 16 cores, 32GB RAM) as a
>DoH
>proxy/
Right. Therefore I would recommend rather to troubleshoot the backend
Winfried
Am 23. Juli 2021 20:56:55 MESZ schrieb Dez C via Pdns-users
:
>Hi,
>
>On 7/23/21 4:14 PM, Winfried Angele via Pdns-users wrote:
>> Does this only happen with DoH frontends? Did you try with UDP
>&
Maybe there is some kind of ratelimt in the backend. Keep in mind that from the
backend point of view all queries come from the same source
Winfried
Am 24. Juli 2021 10:28:49 MESZ schrieb Winfried Angele via Pdns-users
:
>Right. Therefore I would recommend rather to troubleshoot the back
Be aware that "b.nic.aaa A" is not part of the root zone. It's only a glue
record.
Am 21. Dezember 2021 06:28:53 MEZ schrieb Jahanzeb Arshad via Pdns-users
:
>Greeting,
>
>I am having trouble in getting zonetocache working for the root zone. I
>am using PowerDNS Recursor 4.6.0.
>
>I have followi
16 matches
Mail list logo