allow-recursion slowing server to crawl

[Matus UHLAR - fantomas]

On 27.02.13 17:32, Marco C. Coelho wrote:
>Mark Andrews was right.
>This server was being hammered so hard that logging the rejects was 
>killing the performance.
>adding:
>logging {
>  category default { null; };
>  //category lame-servers { null; };
>};
>
>to named.conf fixed the performance issues.

Your server was hammered so hard, because you've had recursion allowed in
the past. Simply leave recursion turned off and do not allow it for foreign
customers (only customers with IPs from your range should be allowed to
recurse). Recursion can cause you even other kinds of troubles.

Simply said: ANYONE, DO NOT ALLOW RECURSION FOR OUTSIDE CLIENTS. EVER.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed by 500% - DEL C:\WINDOWS\*.*