BIND 8.2.3 verus 9.x.x ?? in production

[Brad Knowles]

At 4:06 AM +0000 3/21/01, Ray wrote:

>  In light of the numbers people have reported here, is there any speculation
>  on why outsourcing would improve performance?

	Outsourcing would "improve performance" only if you did not have 
the in-house competence to do the job right in the first place.


	However, outsourcing to a company like Nominum (with their Global 
Name Service), or registering to have them be a secondary for you, 
*would* help improve robustness in the face of local network outages, 
and if there are locally congested networks, could also help people 
get DNS resolution faster if there happens to be a Nominum GNS 
machine that is closer to them (and on their side of the congestion) 
than the authoritative nameservers that you run yourself.

	Companies like Nominum can also offer services to help you make 
your nameservice more robust internally, in addition to the secondary 
services that they can provide to make your nameservice more robust 
externally.

>                                                We're running Redhat Linux 6.2
>  and BIND v8.2.3 on Pentium 75's with 64 MB of RAM and 408 MB hard drives (no
>  graphical interface and all the rest of the unneeded stuff uninstalled), and
>  it appears to be handling the load of a multinational corporation just fine.

	I'm not surprised.  If you do the job right, then surprisingly 
small machines will be able to handle the load for surprisingly large 
businesses.

>  Admittedly the zones are very small. What kind of hits-per-second limit
>  would you folks guess we should be having? We're running about 2 per second
>  now.

	On a machine that size, I'd expect you should be able to get 
close to a hundred queries per second (and maybe more), if things are 
properly set up.  However, the real way to find out would be to test 
a configuration like this, using the same sorts of tools that Rick 
Jones has described in his papers.

--
Brad Knowles, <brad.knowles at skynet.be>

/*     efdtt.c     Author:  Charles M. Hannum <root at ihack.net>             */
/*                                                                         */
/*     Thanks to Phil Carmody <fatphil at asdf.org> for additional tweaks.    */
/*                                                                         */
/*     Length:  434 bytes (excluding unnecessary newlines)                 */
/*                                                                         */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob           */
/*     where title-key = "153 2 8 105 225" or other similar 5-byte key     */

#define m(i)(x[i]^s[i+84])<<
unsigned char x[5],y,s[2048];main(n){for(read(0,x,5);read(0,s,n=2048);write(1,s
,n))if(s[y=s[13]%8+20]/16%4==1){int i=m(1)17^256+m(0)8,k=m(2)0,j=m(4)17^m(3)9^k
*2-k%8^8,a=0,c=26;for(s[y]-=16;--c;j*=2)a=a*2^i&1,i=i/2^j&1<<24;for(j=127;++j<n
;c=c>y)c+=y=i^i/8^i>>4^i>>12,i=i>>8^y<<17,a^=a>>14,y=a^a*8^a<<6,a=a>>8^y<<9,k=s
[j],k="7Wo~'G_\216"[k&7]+2^"cr3sfw6v;*k+>/n."[k>>4]*2^k*257/8,s[j]=k^(k&k*2&34)
*6^c+~y;}}