7 Čec
2014
7 Čec
'14
13:39
Hi Maren,
you should turn the explicit notification
both in bind and knot.
For Knot use "notify-out <slave1> <slave2>;" + "xfr-out
<slave1> <slave2>;"
See the documentation:
https://www.knot-dns.cz/static/documentation/html/configuration.html#master…
For Bind use "notify explicit;" + "also-notify;", see:
http://www.zytrax.com/books/dns/ch7/xfer.html#notify
Ondrej
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
From: "Maren S. Leizaola"
<leizaola(a)udr.hk.com>
To: knot-dns-users(a)lists.nic.cz
Sent: Monday, July 7, 2014 1:32:52 PM
Subject: [knot-dns-users] Two hidden masters - sending notifications to public slaves.
Hi,
We are setting up to do zone generations of two separate hidden masters
which will take turns on the zone generation.
Public/visible DNS servers "should" get notifies from both servers and
select the one with the with the highest serial number.
I am planning to run bind on one server and knot on the other. On bind i
have the issue that it would not send notifies to the name servers until
I turned on "notify-soa yes;". However I realise that his will only
notify one single DNS server and introduces a single point of failure.
Does Knot have any issues sending the notifies. How do I go about
getting this done?
Regards,
Maren
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
8 Čec
8 Čec
13:45
New subject: Two hidden masters - sending notifications to public slaves.
Thanks for the bind support.
So far I only have the bind based hidden master working. After
implemented these changes the zone transfers will take too long from the
time I do the rndc reload on the hidden master.
The knot based public servers are a bit quicker typically takes about 1
to 2 minutes.
The bind based public servers are random, I think they are typically
transfer on retry.
Once the transfer starts it is instantaneous.
I have no clue what it is doing that time... It is as if the notifies
are being stalled....
The master is behind a firewall and the NAT is a 1:1 so the source IP of
the Notifies and IXFR is correct.
On knot i am getting a Incoming IXFR of xxx Falling back to AXFR
On 7/7/2014 7:39 PM, Ondřej Surý wrote:
Hi Maren,
you should turn the explicit notification
both in bind and knot.
For Knot use "notify-out <slave1> <slave2>;" + "xfr-out
<slave1> <slave2>;"
See the documentation:
https://www.knot-dns.cz/static/documentation/html/configuration.html#master…
For Bind use "notify explicit;" + "also-notify;", see:
http://www.zytrax.com/books/dns/ch7/xfer.html#notify
Ondrej
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
> From: "Maren S. Leizaola" <leizaola(a)udr.hk.com>
> To: knot-dns-users(a)lists.nic.cz
> Sent: Monday, July 7, 2014 1:32:52 PM
> Subject: [knot-dns-users] Two hidden masters - sending notifications to public
slaves.
> Hi,
>
> We are setting up to do zone generations of two separate hidden masters
> which will take turns on the zone generation.
>
> Public/visible DNS servers "should" get notifies from both servers and
> select the one with the with the highest serial number.
>
> I am planning to run bind on one server and knot on the other. On bind i
> have the issue that it would not send notifies to the name servers until
> I turned on "notify-soa yes;". However I realise that his will only
> notify one single DNS server and introduces a single point of failure.
>
> Does Knot have any issues sending the notifies. How do I go about
> getting this done?
>
> Regards,
> Maren
>
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
14:27
New subject: Two hidden masters - sending notifications to public slaves.
Hello,
May be you provide related configs?
2014-07-08 15:45 GMT+04:00 Maren S. Leizaola <leizaola(a)udr.hk.com>om>:
Thanks for the bind support.
So far I only have the bind based hidden master working. After implemented
these changes the zone transfers will take too long from the time I do the
rndc reload on the hidden master.
The knot based public servers are a bit quicker typically takes about 1 to 2
minutes.
The bind based public servers are random, I think they are typically
transfer on retry.
Once the transfer starts it is instantaneous.
I have no clue what it is doing that time... It is as if the notifies are
being stalled....
The master is behind a firewall and the NAT is a 1:1 so the source IP of the
Notifies and IXFR is correct.
On knot i am getting a Incoming IXFR of xxx Falling back to AXFR
On 7/7/2014 7:39 PM, Ondřej Surý wrote:
--
Is there any problem Exterminatus cannot solve? I have not found one yet.
Hi Maren,
you should turn the explicit notification
both in bind and knot.
For Knot use "notify-out <slave1> <slave2>;" + "xfr-out
<slave1>
<slave2>;"
See the documentation:
https://www.knot-dns.cz/static/documentation/html/configuration.html#master…
For Bind use "notify explicit;" + "also-notify;", see:
http://www.zytrax.com/books/dns/ch7/xfer.html#notify
Ondrej
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
>
> From: "Maren S. Leizaola" <leizaola(a)udr.hk.com>
> To: knot-dns-users(a)lists.nic.cz
> Sent: Monday, July 7, 2014 1:32:52 PM
> Subject: [knot-dns-users] Two hidden masters - sending notifications to
> public slaves.
> Hi,
>
> We are setting up to do zone generations of two separate hidden masters
> which will take turns on the zone generation.
>
> Public/visible DNS servers "should" get notifies from both servers and
> select the one with the with the highest serial number.
>
> I am planning to run bind on one server and knot on the other. On bind i
> have the issue that it would not send notifies to the name servers until
> I turned on "notify-soa yes;". However I realise that his will only
> notify one single DNS server and introduces a single point of failure.
>
> Does Knot have any issues sending the notifies. How do I go about
> getting this done?
>
> Regards,
> Maren
>
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
18:23
New subject: Two hidden masters - sending notifications to public slaves.
Peter,
Thanks for your off list help.
Your suggest of using tcpdump lead me to find that the cause of the
problem. I had not taken into account that the notifies worked on UDP.
I had not enabled UDP on the firewall as I thought TCP would be sufficient.
After UDP notifies don't work on UDP the both bind and knot fail over to
TCP... the fail over is a bit lengthy.
Thank you all.
On 7/8/2014 8:27 PM, Peter Andreev wrote:
Hello,
May be you provide related configs?
2014-07-08 15:45 GMT+04:00 Maren S. Leizaola <leizaola(a)udr.hk.com>om>:
Thanks for the bind support.
So far I only have the bind based hidden master working. After implemented
these changes the zone transfers will take too long from the time I do the
rndc reload on the hidden master.
The knot based public servers are a bit quicker typically takes about 1 to 2
minutes.
The bind based public servers are random, I think they are typically
transfer on retry.
Once the transfer starts it is instantaneous.
I have no clue what it is doing that time... It is as if the notifies are
being stalled....
The master is behind a firewall and the NAT is a 1:1 so the source IP of the
Notifies and IXFR is correct.
On knot i am getting a Incoming IXFR of xxx Falling back to AXFR
On 7/7/2014 7:39 PM, Ondřej Surý wrote:
Hi Maren,
you should turn the explicit notification
both in bind and knot.
For Knot use "notify-out <slave1> <slave2>;" + "xfr-out
<slave1>
<slave2>;"
See the documentation:
https://www.knot-dns.cz/static/documentation/html/configuration.html#master…
For Bind use "notify explicit;" + "also-notify;", see:
http://www.zytrax.com/books/dns/ch7/xfer.html#notify
Ondrej
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
> From: "Maren S. Leizaola" <leizaola(a)udr.hk.com>
> To: knot-dns-users(a)lists.nic.cz
> Sent: Monday, July 7, 2014 1:32:52 PM
> Subject: [knot-dns-users] Two hidden masters - sending notifications to
> public slaves.
> Hi,
>
> We are setting up to do zone generations of two separate hidden masters
> which will take turns on the zone generation.
>
> Public/visible DNS servers "should" get notifies from both servers and
> select the one with the with the highest serial number.
>
> I am planning to run bind on one server and knot on the other. On bind i
> have the issue that it would not send notifies to the name servers until
> I turned on "notify-soa yes;". However I realise that his will only
> notify one single DNS server and introduces a single point of failure.
>
> Does Knot have any issues sending the notifies. How do I go about
> getting this done?
>
> Regards,
> Maren
>
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users 
20:04
New subject: Two hidden masters - sending notifications to public slaves.
Hi,
better late than never, but the 1.5.x now uses TCP for notifications
as well because it's easier (and faster) to determine whether the
slave is operational, and provides a little bit of self-pacing for
zone distribution.
Best,
Marek
On 8 July 2014 09:23, Maren S. Leizaola <leizaola(a)udr.hk.com> wrote:
Peter,
Thanks for your off list help.
Your suggest of using tcpdump lead me to find that the cause of the problem.
I had not taken into account that the notifies worked on UDP.
I had not enabled UDP on the firewall as I thought TCP would be sufficient.
After UDP notifies don't work on UDP the both bind and knot fail over to
TCP... the fail over is a bit lengthy.
Thank you all.
On 7/8/2014 8:27 PM, Peter Andreev wrote:
Hello,
May be you provide related configs?
2014-07-08 15:45 GMT+04:00 Maren S. Leizaola <leizaola(a)udr.hk.com>om>:
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
Thanks for the bind support.
So far I only have the bind based hidden master working. After
implemented
these changes the zone transfers will take too long from the time I do
the
rndc reload on the hidden master.
The knot based public servers are a bit quicker typically takes about 1
to 2
minutes.
The bind based public servers are random, I think they are typically
transfer on retry.
Once the transfer starts it is instantaneous.
I have no clue what it is doing that time... It is as if the notifies are
being stalled....
The master is behind a firewall and the NAT is a 1:1 so the source IP of
the
Notifies and IXFR is correct.
On knot i am getting a Incoming IXFR of xxx Falling back to AXFR
On 7/7/2014 7:39 PM, Ondřej Surý wrote:
Hi Maren,
you should turn the explicit notification
both in bind and knot.
For Knot use "notify-out <slave1> <slave2>;" + "xfr-out
<slave1>
<slave2>;"
See the documentation:
https://www.knot-dns.cz/static/documentation/html/configuration.html#master…
For Bind use "notify explicit;" + "also-notify;", see:
http://www.zytrax.com/books/dns/ch7/xfer.html#notify
Ondrej
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
>
> From: "Maren S. Leizaola" <leizaola(a)udr.hk.com>
> To: knot-dns-users(a)lists.nic.cz
> Sent: Monday, July 7, 2014 1:32:52 PM
> Subject: [knot-dns-users] Two hidden masters - sending notifications to
> public slaves.
> Hi,
>
> We are setting up to do zone generations of two separate hidden masters
> which will take turns on the zone generation.
>
> Public/visible DNS servers "should" get notifies from both servers and
> select the one with the with the highest serial number.
>
> I am planning to run bind on one server and knot on the other. On bind
> i
> have the issue that it would not send notifies to the name servers
> until
> I turned on "notify-soa yes;". However I realise that his will only
> notify one single DNS server and introduces a single point of failure.
>
> Does Knot have any issues sending the notifies. How do I go about
> getting this done?
>
> Regards,
> Maren
>
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
3588
days inactive
3589
days old
5 comments
4 participants
participants (4)
-
Marek Vavruša -
Maren S. Leizaola -
Ondřej Surý -
Peter Andreev