<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-NZ" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi there,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Just wondering if there’s any way of monitoring the ACL Drops at all – I couldn’t figure out a way.
<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">We’d just like to see where the ACL drops are coming from in case we’ve missed some networks – but working well so far.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also we have high latency to our backend PDNS Recursors and we can’t work out why / how – here’s a copy of our config below – we’re seeing latency of 100+ ms is that normal? For info the 1<sup>st</sup> two recursors are in the same subnet
(sub 1ms) and the other two are 16ms:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Config: <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">controlSocket("0.0.0.0")<o:p></o:p></p>
<p class="MsoNormal">setKey("blarg")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Listen<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">addLocal("0.0.0.0:53")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Web Server<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">webserver("0.0.0.0:80", "notforyou")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Fix up truncated replies<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">truncateTC(true)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Set Server Policy<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">setServerPolicy(whashed)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Backend Servers<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">newServer({address="xx.xx.xx.xx:53", name="recursor1.xxx", weight=10, qps=5000})<o:p></o:p></p>
<p class="MsoNormal">newServer({address="xx.xx.xx.xy:53", name="recursor2.xxx", weight=10, qps=5000})<o:p></o:p></p>
<p class="MsoNormal">newServer({address="yy.yy.yy.yy:53", name="recursor1.yyy", qps=5000})<o:p></o:p></p>
<p class="MsoNormal">newServer({address="yy.yy.yy.yx:53", name="recursor2.yyy", qps=5000})<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- PacketCache<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">pc = newPacketCache(1000000, 86400, 0, 60, 60)<o:p></o:p></p>
<p class="MsoNormal">getPool(""):setCache(pc)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- Rate Limiting<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">addDelay(MaxQPSIPRule(100, 32, 48), 100)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--function maintenance()<o:p></o:p></p>
<p class="MsoNormal">-- addDynBlocks(exceedQRate(50, 10), "Exceeded query rate", 60)<o:p></o:p></p>
<p class="MsoNormal">--end<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-- ACL<o:p></o:p></p>
</div>
<br>
<table style="MARGIN-BOTTOM: 25px; FONT-FAMILY: 'Arial', Helvetica, sans-serif; COLOR: #565656; MARGIN-TOP: 35px" cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td style="FONT-SIZE: 8px; PADDING-BOTTOM: 0px; TEXT-ALIGN: center; PADDING-TOP: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 20px">
<p style="FONT-SIZE: 8px !important; FONT-FAMILY: 'Arial', Helvetica, sans-serif; COLOR: #999; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" nowrap="">
<img style="HEIGHT: 37px; WIDTH: 160px" src="https://voyager.nz/images/sig/voyager.jpg"></p>
<p style="FONT-SIZE: 8px; FONT-FAMILY: 'Arial', Helvetica, sans-serif; COLOR: #999; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 7px 0px 0px; PADDING-RIGHT: 0px">
INTERNET | VOICE | HOSTING | DOMAINS</p>
</td>
<td style="BORDER-RIGHT: #ddd 1px solid; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 20px; BORDER-LEFT: #ddd 1px solid; PADDING-RIGHT: 20px">
<p style="FONT-SIZE: 11px; FONT-FAMILY: 'Arial', Helvetica, sans-serif; MARGIN: 0px; DISPLAY: block">
<strong>Daniel Oakes</strong> | CTO</p>
<p style="FONT-SIZE: 10px; FONT-FAMILY: 'Arial', Helvetica, sans-serif; COLOR: #565656; MARGIN: 11px 0px 0px; DISPLAY: block">
<strong style="COLOR: #565656">DDI:</strong>+6437777770 | <strong style="COLOR: #565656">
M:</strong>+6421708317</p>
<p style="FONT-SIZE: 10px; FONT-FAMILY: 'Arial', Helvetica, sans-serif; COLOR: #999; MARGIN: 4px 0px 0px; DISPLAY: block">
<a style="COLOR: #999" href="mailto:daniel.oakes@voyager.nz">daniel.oakes@voyager.nz</a> |
<a style="COLOR: #999" href="https://voyager.nz">voyager.nz</a></p>
</td>
<td style="PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 20px; PADDING-RIGHT: 0px; WIDTH: 60px">
<a href="https://www.facebook.com/voyagernz"><img src="https://voyager.nz/images/sig/facebook.png"></a>
<a href="https://twitter.com/voyagernz"><img src="https://voyager.nz/images/sig/twitter.png"></a>
</td>
</tr>
</tbody>
</table>
<br>
</body>
</html>