<div><div dir="auto">Use SQL replication on all the Slave servers. Making SQL replication will add speed.</div></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 24 Sep 2019 at 5:30 PM, <<a href="mailto:pdns-users-request@mailman.powerdns.com">pdns-users-request@mailman.powerdns.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send Pdns-users mailing list submissions to<br>
<a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:pdns-users-request@mailman.powerdns.com" target="_blank">pdns-users-request@mailman.powerdns.com</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:pdns-users-owner@mailman.powerdns.com" target="_blank">pdns-users-owner@mailman.powerdns.com</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Pdns-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. How should my backend tell pdns that pdns_server that it has<br>
changed the zone (jb-wisemo)<br>
2. Re: PowerDNS: One Response Policy Zones refuses to update via<br>
IXFR -- always uses AXFR (Otto Moerbeek)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 24 Sep 2019 00:31:30 +0200<br>
From: jb-wisemo <<a href="mailto:jb-powerdns@wisemo.com" target="_blank">jb-powerdns@wisemo.com</a>><br>
To: <a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a><br>
Subject: [Pdns-users] How should my backend tell pdns that pdns_server<br>
that it has changed the zone<br>
Message-ID: <<a href="mailto:cabf1a44-17f8-95e6-ef86-881c0520f2a2@wisemo.com" target="_blank">cabf1a44-17f8-95e6-ef86-881c0520f2a2@wisemo.com</a>><br>
Content-Type: text/plain; charset=utf-8; format=flowed<br>
<br>
Hi,<br>
<br>
I am creating a custom master-mode backend for a special use. But some <br>
questions are left open or vague by the documentation, here is the first <br>
one:<br>
<br>
How shall I tell pdns_server that I have changed my zone and increased <br>
the zone serial in the database?<br>
<br>
Idea is to trigger notify and replication to ordinary slaves as quickly <br>
as possible, being able to tell code elsewhere that the changes should <br>
now be available in the global DNS (doing my own TTL calculations).<br>
<br>
Zone may be unsigned or NSEC3-wide, as NSEC3-narrow doesn't seem to <br>
support replication to slaves that don't have the ZSK private key.<br>
<br>
<br>
Enjoy<br>
<br>
Jakob<br>
-- <br>
Jakob Bohm, CIO, Partner, WiseMo A/S. <a href="https://www.wisemo.com" rel="noreferrer" target="_blank">https://www.wisemo.com</a><br>
<a href="https://www.google.com/maps/search/Transformervej+29,+2860?entry=gmail&source=g">Transformervej 29, 2860</a> S?borg, Denmark. Direct +45 31 13 16 10<br>
This public discussion message is non-binding and may contain errors.<br>
WiseMo - Remote Service Management for PCs, Phones and Embedded<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 24 Sep 2019 08:04:22 +0200<br>
From: Otto Moerbeek <<a href="mailto:otto@drijf.net" target="_blank">otto@drijf.net</a>><br>
To: Simon Forster <<a href="mailto:forster@deteque.com" target="_blank">forster@deteque.com</a>><br>
Cc: <a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a><br>
Subject: Re: [Pdns-users] PowerDNS: One Response Policy Zones refuses<br>
to update via IXFR -- always uses AXFR<br>
Message-ID: <<a href="mailto:20190924060422.GG86353@clue.drijf.net" target="_blank">20190924060422.GG86353@clue.drijf.net</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
On Mon, Sep 23, 2019 at 07:07:32AM +0200, Otto Moerbeek wrote:<br>
<br>
> On Sun, Sep 22, 2019 at 07:37:29PM +0100, Simon Forster wrote:<br>
> <br>
> > Hi<br>
> > <br>
> > We have a customer consuming a bunch of Response Policy Zones using PowerDNS. For all bar one, all is good. However, one zone (bogons.ip.dtq) refuses to update via IXFR. Every update is via AXFR.<br>
> > <br>
> > In an attempt to troubleshoot, our engineer created a Docker image that ran PowerDNS Recursor 4.2.0 under Debian 9 (squeeze), the latest general release version. PowerDNS was pulled down from PowerDNS's repository rather than complied by us.<br>
> > <br>
> > The lua-config-file entry in recursor.conf was modified to include a single lua file that contained a single rpzMaster declaration:<br>
> > <br>
> > rpzMaster("199.168.90.51",<br>
> > "bogons.ip.dtq",{defpol=Policy.NXDOMAIN,refresh=300})<br>
> > <br>
> > The testing ended up producing the same errors as the customer?s (undocumented) setup:<br>
> > <br>
> > Sep 21 20:36:55 Loading RPZ zone 'bogons.ip.dtq' from <redacted><br>
> > Sep 21 20:36:55 Loaded & indexed 418 policy records so far for RPZ zone 'bogons.ip.dtq'<br>
> > Sep 21 20:36:56 Loaded & indexed 36887 policy records so far for RPZ zone 'bogons.ip.dtq'<br>
> > Sep 21 20:36:56 Unable to load RPZ zone 'bogons.ip.dtq? from '<redacted>': 'Unable to convert '1:0:0:0' to a netmask'. (Will try again in 300 seconds?)<br>
> > <br>
> > The error message regarding '1:0:0:0? was originally thought to be a problem parsing one record in the bogons.ip.dtq zone: "0.0.0.1::/64?. However, in testing this was manually redacted and it was confirmed that the CIDR no longer existed in the rpz zone data we push out. The error message persisted in the PowerDNS resolver logs.<br>
> > <br>
> > Conclusions:<br>
> > <br>
> > ? The error has nothing to do with the CIDR 0.0.0.1::/64 being included in the zone.<br>
> > ? rpz parsing of RPZ zones has a bug. Our engineer points to IPv6 triggers.<br>
> > ? Our engineer doesn?t like PowerDNS? logging. This last point probably is irrelevant to everyone except our engineer.<br>
> > <br>
> > I?ve been something of a PowerDNS proponent but I?ve failed to gain traction internally. This is not helping my case. Is this a known issue?<br>
> > <br>
> > TIA<br>
> > <br>
> > Simon<br>
> <br>
> Looking at the RPZ related issues in<br>
> <a href="https://github.com/PowerDNS/pdns/issues" rel="noreferrer" target="_blank">https://github.com/PowerDNS/pdns/issues</a> I don't see an obvious match.<br>
> <br>
> Please file an issue and include all relevant (unredacted) data,<br>
> including the RPZ data so that reproductioin and further investigation<br>
> is possible.<br>
<br>
See <a href="https://github.com/PowerDNS/pdns/pull/8340" rel="noreferrer" target="_blank">https://github.com/PowerDNS/pdns/pull/8340</a><br>
<br>
-Otto<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Pdns-users Digest, Vol 200, Issue 15<br>
*******************************************<br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Sent from Gmail Mobile</div>