Best practice for forwarding Dnstap (unix socket) traffic to another address

[Fred Morris]

Hello. For a variety reasons:

  * Dnstap doesn't comport with the usual MTU restrictions, that is an
    "event" is not reliably going to fit in a UDP frame.
  * Dnstap casts your application as the "server" and BIND as the "client".
  * For whatever reasons the implementer(s) saw fit to include a
    mandatory handshake (all it does it say "ok, I'm sending X, what do
    you want?" and you have to respond with whatever the client sent).
  * The only streaming that Dnstap has offered has been unix sockets.

What's the best practice for sending this to another address, presumably
via TCP... socat? Too bad about the handshake, any best practices for
forwarding there?

Thanks in advance...

(Pure Python implementation of fstrm:
https://github.com/m3047/shodohflo/blob/master/shodohflo/fstrm.py)

--

Fred Morris, internet plumber and data sous chef


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220109/8401170d/attachment.htm>