BIND dns high performance cachingDNS Server on Fedora 11Trying to host my own domain, using BIND and CentOS 6. Please check my named.conf and zone for errorsRHEL BIND Server Intermittent errorRecursive forward a zone in BINDSetting up a bind server and can't find the zone fileDNS BIND on CENTOS 6.3 and domain nameserversCannot find solution to “One or more of your nameservers did not return any of your NS records.” on intoDNS siteDNS server forward all queries except the queries for reverse DNSubuntu 14.04 Bind DNS does not work from outside for some of my domainsBind, force zone update on slave
Why use steam instead of just hot air?
stdout and stderr redirection to different files
Would an 8% reduction in drag outweigh the weight addition from this custom CFD-tested winglet?
Ex-manager wants to stay in touch, I don't want to
Why does a C.D.F need to be right-continuous?
Can I use my laptop, which says 240V, in the USA?
Are there variations of the regular runtimes of the Big-O-Notation?
Make all the squares explode
Delta TSA-Precheck status removed
Is a diamond sword feasible?
What is the best way for a skeleton to impersonate human without using magic?
What are the ramifications of setting ARITHABORT ON for all connections in SQL Server?
Control variables and other independent variables
Will change of address affect direct deposit?
Was the Highlands Ranch shooting the 115th mass shooting in the US in 2019
How did Thanos not realise this had happened at the end of Endgame?
Composite Factor Soup
Why can't RGB or bicolour LEDs produce a decent yellow?
On studying Computer Science vs. Software Engineering to become a proficient coder
Can you book a one-way ticket to the UK on a visa?
Can I do brevets (long distance rides) on my hybrid bike? If yes, how to start?
Unit Test - Testing API Methods
semanage not changing file context
How do I tell my supervisor that he is choosing poor replacements for me while I am on maternity leave?
BIND dns high performance caching
DNS Server on Fedora 11Trying to host my own domain, using BIND and CentOS 6. Please check my named.conf and zone for errorsRHEL BIND Server Intermittent errorRecursive forward a zone in BINDSetting up a bind server and can't find the zone fileDNS BIND on CENTOS 6.3 and domain nameserversCannot find solution to “One or more of your nameservers did not return any of your NS records.” on intoDNS siteDNS server forward all queries except the queries for reverse DNSubuntu 14.04 Bind DNS does not work from outside for some of my domainsBind, force zone update on slave
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I'm running bind on a small server used for resolving lots of domains, my main goal is fast resolving of domains and low memory usage.
I want to use something like local zone with the nameservers of all TLDs dig . axfr @g.root-servers.net.
What is happening right now is when cache limit is hit, bind stops caching and for every resolve root server dns is hit. Is there any way to use the axfr output and tell bind to get the NS info for tld from there?
Example of axfr zone
I've tried to add "." master zone with the axfr output but it doesn't work.
zone "." IN
type master;
file "axfrOutput.ca";
;
current named.conf
options
listen-on port 53 127.0.0.1; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query localhost; ;
max-cache-size 100m;
cleaning-interval 1; // clean cache every 1 minutes
max-cache-ttl 120; // limit cached record to a 60s TTL
max-ncache-ttl 120; // limit cache neg. resp. to a 60s TTL
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
;
zone "." IN
type hint;
file "named.ca";
;
domain-name-system bind nameserver named-conf
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
add a comment |
I'm running bind on a small server used for resolving lots of domains, my main goal is fast resolving of domains and low memory usage.
I want to use something like local zone with the nameservers of all TLDs dig . axfr @g.root-servers.net.
What is happening right now is when cache limit is hit, bind stops caching and for every resolve root server dns is hit. Is there any way to use the axfr output and tell bind to get the NS info for tld from there?
Example of axfr zone
I've tried to add "." master zone with the axfr output but it doesn't work.
zone "." IN
type master;
file "axfrOutput.ca";
;
current named.conf
options
listen-on port 53 127.0.0.1; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query localhost; ;
max-cache-size 100m;
cleaning-interval 1; // clean cache every 1 minutes
max-cache-ttl 120; // limit cached record to a 60s TTL
max-ncache-ttl 120; // limit cache neg. resp. to a 60s TTL
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
;
zone "." IN
type hint;
file "named.ca";
;
domain-name-system bind nameserver named-conf
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
1
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
1
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58
add a comment |
I'm running bind on a small server used for resolving lots of domains, my main goal is fast resolving of domains and low memory usage.
I want to use something like local zone with the nameservers of all TLDs dig . axfr @g.root-servers.net.
What is happening right now is when cache limit is hit, bind stops caching and for every resolve root server dns is hit. Is there any way to use the axfr output and tell bind to get the NS info for tld from there?
Example of axfr zone
I've tried to add "." master zone with the axfr output but it doesn't work.
zone "." IN
type master;
file "axfrOutput.ca";
;
current named.conf
options
listen-on port 53 127.0.0.1; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query localhost; ;
max-cache-size 100m;
cleaning-interval 1; // clean cache every 1 minutes
max-cache-ttl 120; // limit cached record to a 60s TTL
max-ncache-ttl 120; // limit cache neg. resp. to a 60s TTL
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
;
zone "." IN
type hint;
file "named.ca";
;
domain-name-system bind nameserver named-conf
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
I'm running bind on a small server used for resolving lots of domains, my main goal is fast resolving of domains and low memory usage.
I want to use something like local zone with the nameservers of all TLDs dig . axfr @g.root-servers.net.
What is happening right now is when cache limit is hit, bind stops caching and for every resolve root server dns is hit. Is there any way to use the axfr output and tell bind to get the NS info for tld from there?
Example of axfr zone
I've tried to add "." master zone with the axfr output but it doesn't work.
zone "." IN
type master;
file "axfrOutput.ca";
;
current named.conf
options
listen-on port 53 127.0.0.1; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query localhost; ;
max-cache-size 100m;
cleaning-interval 1; // clean cache every 1 minutes
max-cache-ttl 120; // limit cached record to a 60s TTL
max-ncache-ttl 120; // limit cache neg. resp. to a 60s TTL
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
;
zone "." IN
type hint;
file "named.ca";
;
domain-name-system bind nameserver named-conf
domain-name-system bind nameserver named-conf
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
asked Jul 21 '15 at 10:35
nacholibrenacholibre
11814
11814
1
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
1
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58
add a comment |
1
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
1
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58
1
1
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
1
1
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58
add a comment |
1 Answer
1
active
oldest
votes
High performance and low memory usage + short cache time are conflicting requirements.
However, what should happen when hitting the max-cache-size limit is that it should start (prematurely) evicting entries from the cache (LRU).
Forcing shorter TTLs (max-cache-ttl) sacrifices performance in favor of quicker convergence. (Probably a bad idea as this will throw out things that are used a lot and would otherwise have high priority in the LRU scheme.)
cleaning-interval is obsolete and has no effect in modern BIND versions.
If you have very high load and want to specifically optimize queries to the root zone you could have your own slave zone for . instead of the normal hint zone.
ICANN provides AXFR access to the root zone as well as some other zones.
edited May 1 at 12:05
Smar
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg doubleSOAs inAXFRdata).
– Håkan Lindqvist
Jul 21 '15 at 11:33
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f707312%2fbind-dns-high-performance-caching%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
High performance and low memory usage + short cache time are conflicting requirements.
However, what should happen when hitting the max-cache-size limit is that it should start (prematurely) evicting entries from the cache (LRU).
Forcing shorter TTLs (max-cache-ttl) sacrifices performance in favor of quicker convergence. (Probably a bad idea as this will throw out things that are used a lot and would otherwise have high priority in the LRU scheme.)
cleaning-interval is obsolete and has no effect in modern BIND versions.
If you have very high load and want to specifically optimize queries to the root zone you could have your own slave zone for . instead of the normal hint zone.
ICANN provides AXFR access to the root zone as well as some other zones.
edited May 1 at 12:05
Smar
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg doubleSOAs inAXFRdata).
– Håkan Lindqvist
Jul 21 '15 at 11:33
add a comment |
High performance and low memory usage + short cache time are conflicting requirements.
However, what should happen when hitting the max-cache-size limit is that it should start (prematurely) evicting entries from the cache (LRU).
Forcing shorter TTLs (max-cache-ttl) sacrifices performance in favor of quicker convergence. (Probably a bad idea as this will throw out things that are used a lot and would otherwise have high priority in the LRU scheme.)
cleaning-interval is obsolete and has no effect in modern BIND versions.
If you have very high load and want to specifically optimize queries to the root zone you could have your own slave zone for . instead of the normal hint zone.
ICANN provides AXFR access to the root zone as well as some other zones.
edited May 1 at 12:05
Smar
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg doubleSOAs inAXFRdata).
– Håkan Lindqvist
Jul 21 '15 at 11:33
add a comment |
High performance and low memory usage + short cache time are conflicting requirements.
However, what should happen when hitting the max-cache-size limit is that it should start (prematurely) evicting entries from the cache (LRU).
Forcing shorter TTLs (max-cache-ttl) sacrifices performance in favor of quicker convergence. (Probably a bad idea as this will throw out things that are used a lot and would otherwise have high priority in the LRU scheme.)
cleaning-interval is obsolete and has no effect in modern BIND versions.
If you have very high load and want to specifically optimize queries to the root zone you could have your own slave zone for . instead of the normal hint zone.
ICANN provides AXFR access to the root zone as well as some other zones.
edited May 1 at 12:05
Smar
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
High performance and low memory usage + short cache time are conflicting requirements.
However, what should happen when hitting the max-cache-size limit is that it should start (prematurely) evicting entries from the cache (LRU).
Forcing shorter TTLs (max-cache-ttl) sacrifices performance in favor of quicker convergence. (Probably a bad idea as this will throw out things that are used a lot and would otherwise have high priority in the LRU scheme.)
cleaning-interval is obsolete and has no effect in modern BIND versions.
If you have very high load and want to specifically optimize queries to the root zone you could have your own slave zone for . instead of the normal hint zone.
ICANN provides AXFR access to the root zone as well as some other zones.
edited May 1 at 12:05
Smar
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
edited May 1 at 12:05
Smar
1297
edited May 1 at 12:05
Smar
1297
edited May 1 at 12:05
Smar
1297
1297
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
answered Jul 21 '15 at 11:02
Håkan LindqvistHåkan Lindqvist
22.6k43762
22.6k43762
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg doubleSOAs inAXFRdata).
– Håkan Lindqvist
Jul 21 '15 at 11:33
add a comment |
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg doubleSOAs inAXFRdata).
– Håkan Lindqvist
Jul 21 '15 at 11:33
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
+1 for slave instead of master
– Nick
Jul 21 '15 at 11:25
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg double
SOAs in AXFR data).– Håkan Lindqvist
Jul 21 '15 at 11:33
Yeah, I didn't go into detail about it but there's just no reason to take on the responsibility of separately updating the zone contents or, for that matter, dealing with any formatting differences that will lead to the zone not loading (eg double
SOAs in AXFR data).– Håkan Lindqvist
Jul 21 '15 at 11:33
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f707312%2fbind-dns-high-performance-caching%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
If you don't need IPv6 resolution, DNSCache is lightweight and fast.
– Johnny
Jul 21 '15 at 15:47
1
Why do you want to cache the entire root zone anyway? There are over a thousand delegated zones in it these days, and I'm pretty sure your users only access a small fraction of them.
– Calle Dybedahl
Jul 22 '15 at 7:58