<div dir="ltr"><div>Hi everybody,</div><div><br></div><div><font color="#9900ff">Issue 1:</font></div><div>Thanks Ruben about your link.</div><div>I downloaded and re-used rpm from powerdns repo for el7. It is the same with rpm that I yum from my centOS.</div><div>After I installed new dnsdist-1.0.0-1pdns.el7.x86_64.rpm again. I tried to test encrypt:</div><div><br></div><div>> testCrypto()</div><div>Crypto not available.</div><div><br></div><div>All rpms suggested from Oli:</div><div>dnsdist-1.0.0-1pdns.el7.x86_64.rpm</div><div>dnscrypt-proxy-1.6.1-3.el7.x86_64.rpm</div><div>libedit-3.0-12.20121213cvs.el7.x86_64</div><div>libsodium-1.0.5-1.el7.x86_64.rpm</div><div>luajit-2.0.4-3.el7.x86_64.rpm</div><div>protobuf-2.5.0-7.el7.x86_64.rpm</div><div>re2-20160401-2.el7.x86_64.rpm</div><div>systemd-219-19.el7_2.13.x86_64</div><div>systemd-libs-219-19.el7_2.13.x86_64</div><div><br></div><div><br></div><div>I tried to read code from powerdns github, I guess "ifdef HAVE_LIBSODIUM" returned "false".</div><div>I uninstalled dnsdist-1.0 rpm then I installed "dnsdist-1.1.0-0.1.beta1.1pdns.el7.x86_64.rpm". It returned result:</div><div><br></div><div>> testCrypto()</div><div>Everything is ok!</div><div><br></div><div>Is it a bug of DNSDist with Redhat 7.2? I hope new dnsdist-1.1 will be release soon.</div><div><br></div><div><font color="#9900ff">Issue 2:</font></div><div><br></div><div>Thanks Winfried and Theodore !!</div><div><br></div><div>After I applied your suggestion, It works properly (as my expectation).</div><div>I'm still not clearly. If my DNS server manage multi zone such as: <a href="http://zone1.com">zone1.com</a>, <a href="http://zone2.com">zone2.com</a>, <a href="http://zone3.com">zone3.com</a>, Will I add as below ?</div><div><br></div><div>newServer{address="<a href="http://192.168.88.27:5353">192.168.88.27:5353</a>", qps=10, order=1, checkName="<a href="http://zone1.com">zone1.com</a>"}</div><div>newServer{address="<a href="http://192.168.88.27:5353">192.168.88.27:5353</a>", qps=10, order=1, checkName="<a href="http://zone2.com">zone2.com</a>"}</div><div>newServer{address="<a href="http://192.168.88.27:5353">192.168.88.27:5353</a>", qps=10, order=1, checkName="<a href="http://zone3.com">zone3.com</a>"}</div><div>newServer{address="192.168.88.33", qps=10, order=2, checkName="<a href="http://zone1.com">zone1.com</a>"}</div><div>newServer{address="192.168.88.33", qps=10, order=2, checkName="<a href="http://zone2.com">zone2.com</a>"}</div><div>newServer{address="192.168.88.33", qps=10, order=2, checkName="<a href="http://zone2.com">zone2.com</a>"}</div><div><br></div><div>Some example from dnsdist README, newServer are always "up" without checkName. I tried to install DNSDist in a system no DNS and one newserver, downstream still "down". Can you help me clarify about it?</div><div><br></div><div><div>Kind regards,</div><div><br></div><div>Thao Nguyen</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-11-26 0:51 GMT+07:00 Theodore Baschak <span dir="ltr"><<a href="mailto:theodore@ciscodude.net" target="_blank">theodore@ciscodude.net</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="gmail-h5">On Fri, Nov 25, 2016 at 11:05 AM, <span dir="ltr"><<a href="mailto:abang@t-ipnet.net" target="_blank">abang@t-ipnet.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-m_-4552072208592712526gmail-">> responded to health check with ServFail<br>
<br></span>
You have to define a health check which works!<br>
<br>
>From documentation:<br>
<br>
newServer({address="ip:port", qps=1000, order=1, weight=10, pool="abuse", retries=5, tcpSendTimeout=30, tcpRecvTimeout=30, checkName="<a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a>.<wbr>", checkType="A", setCD=false, maxCheckFailures=1, mustResolve=false, useClientSubnet=true, source="address|interface name|address@interface"}): instantiate a server with additional parameters<br>
<br>
See <br>
<a href="http://dnsdist.org/README" target="_blank">http://dnsdist.org/README</a>/<br>
<br>
Winfried<br>
<br></blockquote><div><br></div></div></div><div>To expand on this a little, the default check is to do an A lookup for <a href="http://a.root-servers.net" target="_blank">a.root-servers.net</a> which is ok for a recursive DNS server, but if you're putting dnsdist in front of an authoritative DNS server (if you're hosting your own zone you are) then you'll need to adjust your check to fit your environment. </div><div><div class="gmail-m_-4552072208592712526gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><div><br class="gmail-m_-4552072208592712526gmail-Apple-interchange-newline">Example:</div><div><div style="font-size:12.8px">newServer{address="<a href="http://192.168.3.3:5353/" target="_blank">192.168.3.3<wbr>:5353</a>", qps=10, order=1, checkName="<a href="http://myzone.com" target="_blank">myzone.com</a>"}</div><div style="font-size:12.8px">newServer{address="192.168.3.4<wbr>", qps=10, order=2<span style="font-size:12.8px">, checkName="<a href="http://myzone.com" target="_blank">myzone.com</a>"</span><span style="font-size:12.8px">}</span></div></div><div><br></div><div>Theodore Baschak - AS395089 - Hextet Systems</div><div><a href="https://ciscodude.net/" target="_blank">https://ciscodude.net/</a> - <a href="https://hextet.systems/" target="_blank">https<wbr>://hextet.systems/</a></div><div><a href="http://mbix.ca/" target="_blank">http://mbix.ca/</a></div></div><div><br></div><div><br></div></div></div></div></div></div></div></div></div></div></div></div>
</blockquote></div><br></div></div>