[Pdns-users] Lua control of config settings?

MRob mrobti at insiberia.net
Tue Apr 17 19:44:07 UTC 2018


On 2018-04-17 05:24, MRob wrote:
> On 2018-04-16 10:55, MRob wrote:
>> On 2018-04-16 10:09, Remi Gacogne wrote:
>>> On 04/16/2018 12:03 PM, MRob wrote:
>>>>> According to this, you *should* be able to load a million domains 
>>>>> into
>>>>> LUA without problem. 
>>>> 
>>>> That's the same method this person said crashed recursor with much 
>>>> less
>>>> https://git.mauras.ch/Various/powerdns_recursor_ads_blocking
>>>> Are there other people who have experience?
>>> 
>>> It shouldn't crash the recursor and if you can reproduce the crash 
>>> and
>>> share the reproduction method I would be happy to look into it.
>> 
>> ok maybe I will try it but can any people comment is there pros or
>> cons to implementing a block list using Policy Zones instead comparing
>> to loading the file direct into a big list?
>> 
>> I have policy zone based blocklisting working but only with a few test
>> domains in zone file
> 
> I tested with over 500.000 domain list using both methods. RPZ pauses
> at startup while loading the zone, using Lua domain list pauses when
> first query comes and the server forks its workers. RPZ pause feels a
> couple seconds slower, but not scientific measurement.
> 
> Only RPZ gave this error:
> Unable to load RPZ zone from '.....rpz': name too long
> I had to comment out long domain lines. Can someone indicate what the
> maximum domain name length should be?

Max full domain name should be 253 but RPZ refuses to load a domain in 
my list that is 246 chars. What is pdns max length?

> After startup, responsiveness seems normal using both methods but it's
> just one person test visiting a few different sites so I can't give
> solid data.

Still wonder on this question:

> Are there another reasons to consider why or why not to use RPZ vs.
> loading domain list direct in Lua?

Is the mechanism to look up domain in RPZ different than lookup in a Lua 
Domain Set? Any factors to consider? Thanks.


More information about the Pdns-users mailing list