[Pdns-users] Lua control of config settings?
MRob
mrobti at insiberia.net
Tue Apr 17 19:44:07 UTC 2018
On 2018-04-17 05:24, MRob wrote:
> On 2018-04-16 10:55, MRob wrote:
>> On 2018-04-16 10:09, Remi Gacogne wrote:
>>> On 04/16/2018 12:03 PM, MRob wrote:
>>>>> According to this, you *should* be able to load a million domains
>>>>> into
>>>>> LUA without problem.
>>>>
>>>> That's the same method this person said crashed recursor with much
>>>> less
>>>> https://git.mauras.ch/Various/powerdns_recursor_ads_blocking
>>>> Are there other people who have experience?
>>>
>>> It shouldn't crash the recursor and if you can reproduce the crash
>>> and
>>> share the reproduction method I would be happy to look into it.
>>
>> ok maybe I will try it but can any people comment is there pros or
>> cons to implementing a block list using Policy Zones instead comparing
>> to loading the file direct into a big list?
>>
>> I have policy zone based blocklisting working but only with a few test
>> domains in zone file
>
> I tested with over 500.000 domain list using both methods. RPZ pauses
> at startup while loading the zone, using Lua domain list pauses when
> first query comes and the server forks its workers. RPZ pause feels a
> couple seconds slower, but not scientific measurement.
>
> Only RPZ gave this error:
> Unable to load RPZ zone from '.....rpz': name too long
> I had to comment out long domain lines. Can someone indicate what the
> maximum domain name length should be?
Max full domain name should be 253 but RPZ refuses to load a domain in
my list that is 246 chars. What is pdns max length?
> After startup, responsiveness seems normal using both methods but it's
> just one person test visiting a few different sites so I can't give
> solid data.
Still wonder on this question:
> Are there another reasons to consider why or why not to use RPZ vs.
> loading domain list direct in Lua?
Is the mechanism to look up domain in RPZ different than lookup in a Lua
Domain Set? Any factors to consider? Thanks.
More information about the Pdns-users
mailing list