[EXTERNAL] bind-users Digest, Vol 4327, Issue 1

Lenny Rollison lrollison at pros.com
Wed Sep 27 21:14:01 UTC 2023 

Unsubscribe


From: bind-users <bind-users-bounces at lists.isc.org> On Behalf Of bind-users-request at lists.isc.org
Sent: Wednesday, September 27, 2023 4:02 PM
To: bind-users at lists.isc.org
Subject: [EXTERNAL] bind-users Digest, Vol 4327, Issue 1

Send bind-users mailing list submissions to bind-users@ lists. isc. org To subscribe or unsubscribe via the World Wide Web, visit https: //urldefense. com/v3/__https: //lists. isc. org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$


Send bind-users mailing list submissions to

               bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>



To subscribe or unsubscribe via the World Wide Web, visit

               https://urldefense.com/v3/__https://lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$>

or, via email, send a message with subject or body 'help' to

               bind-users-request at lists.isc.org<mailto:bind-users-request at lists.isc.org>



You can reach the person managing the list at

               bind-users-owner at lists.isc.org<mailto:bind-users-owner at lists.isc.org>



When replying, please edit your Subject line so it is more specific

than "Re: Contents of bind-users digest..."





Today's Topics:



   1. Hyperlocal RFC8806 Root Mirror (Silva Carlos)

   2. Re: Hyperlocal RFC8806 Root Mirror (Michael Richardson)

   3. KSAP - How to manually rollover keys documentation? (Eddie Rowe)





----------------------------------------------------------------------



Message: 1

Date: Wed, 27 Sep 2023 12:53:54 -0300

From: Silva Carlos <scarlos.4566 at gmail.com<mailto:scarlos.4566 at gmail.com>>

To: bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>

Subject: Hyperlocal RFC8806 Root Mirror

Message-ID:

               <CAE0CwPqy17EA41H-cNhnz0TU5O8Z33fxS0WO+i_5tZTaQYEeag at mail.gmail.com<mailto:CAE0CwPqy17EA41H-cNhnz0TU5O8Z33fxS0WO+i_5tZTaQYEeag at mail.gmail.com>>

Content-Type: text/plain; charset="utf-8"



+++++++++++++++++++++++++++++++++++++++++++++++++



Hey guys.

I have two recursive servers, bind 9.18 on Debian 12.



On server A I configured HyperLocal. On Server B I did NOT configure

HyperLocal.



I ran the command "dig @localhost EXAMPLES" on both servers.

EXAMPLES: blabla.sdf.dd or teste.com.eroterrter or world.nanana



Problem: Both Servers report that "Query TIme = 0 ms". I understand that

Server A should result in 0ms and Server B should have a non-zero time as

Server B does not have a copy of the Root Zone DB.



Question: Where am I going wrong? Am I missing some basic principle?





I'm following this tutorial:

https://urldefense.com/v3/__https://semanacap.bcp.nic.br/files/apresentacao/arquivo/864/Implementacao*20de*20servidores*20recursivos*20guia*20de*20praticas*20semcap*20ceptro*20br.pdf__;JSUlJSUlJSUl!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXwWDW0NG$<https://urldefense.com/v3/__https:/semanacap.bcp.nic.br/files/apresentacao/arquivo/864/Implementacao*20de*20servidores*20recursivos*20guia*20de*20praticas*20semcap*20ceptro*20br.pdf__;JSUlJSUlJSUl!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXwWDW0NG$>



Best Regards +++++++++++++++++++++++++++++++++++++++++++++++++



<https://urldefense.com/v3/__https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$<https://urldefense.com/v3/__https:/www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$>>

N?o

cont?m v?rus.https://urldefense.com/v3/__http://www.avast.com__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7CXzq1D$<https://urldefense.com/v3/__http:/www.avast.com__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7CXzq1D$>

<https://urldefense.com/v3/__https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$<https://urldefense.com/v3/__https:/www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX0QzDex6$>>

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

-------------- next part --------------

An HTML attachment was scrubbed...

URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/e250fc52/attachment-0001.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX5em3bOy$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/e250fc52/attachment-0001.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX5em3bOy$>>



------------------------------



Message: 2

Date: Wed, 27 Sep 2023 14:15:43 -0400

From: Michael Richardson <mcr at sandelman.ca<mailto:mcr at sandelman.ca>>

To: Silva Carlos <scarlos.4566 at gmail.com<mailto:scarlos.4566 at gmail.com>>, bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>

Subject: Re: Hyperlocal RFC8806 Root Mirror

Message-ID: <6839.1695838543 at localhost<mailto:6839.1695838543 at localhost>>

Content-Type: text/plain; charset="us-ascii"





Silva Carlos <scarlos.4566 at gmail.com<mailto:scarlos.4566 at gmail.com>> wrote:

    > On server A I configured HyperLocal. On Server B I did NOT configure

    > HyperLocal.



    > I ran the command "dig @localhost EXAMPLES" on both servers.

    > EXAMPLES: blabla.sdf.dd or teste.com.eroterrter or world.nanana



    > Problem: Both Servers report that "Query TIme = 0 ms". I understand that

    > Server A should result in 0ms and Server B should have a non-zero time as

    > Server B does not have a copy of the Root Zone DB.



    > Question: Where am I going wrong? Am I missing some basic principle?



1. Server B could have cached the result already.

   Make sure you start it cold.

2. The query is probably taking between 0ms and 1ms, but rounds down to 0ms.



To be sure, you could tcpdump the network on server B.



-------------- next part --------------

A non-text attachment was scrubbed...

Name: signature.asc

Type: application/pgp-signature

Size: 511 bytes

Desc: not available

URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/6dedd376/attachment-0001.sig__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7t0iQ0K$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/6dedd376/attachment-0001.sig__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljX7t0iQ0K$>>



------------------------------



Message: 3

Date: Wed, 27 Sep 2023 21:02:16 +0000

From: Eddie Rowe <Eddie.Rowe at werdev.com<mailto:Eddie.Rowe at werdev.com>>

To: "bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>" <bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>>

Subject: KSAP - How to manually rollover keys documentation?

Message-ID:

 <MW5PR22MB3132FCB88583E2A81F12E18AEAC2A at MW5PR22MB3132.namprd22.prod.outlook.com<mailto:MW5PR22MB3132FCB88583E2A81F12E18AEAC2A at MW5PR22MB3132.namprd22.prod.outlook.com>>



Content-Type: text/plain; charset="iso-8859-1"



I am using the nifty feature of the KASP in 9.16.23, but I cannot seem to locate documentation on how to manually rollover keys in case this is needed in the future. The documentation is excellent as far as discussing the steps involved for the manual or semi-automatic but I am not seeing the steps and tools you would use to rollover manually when using the KASP feature.  Am I overlooking another document or KB article on this topic?





-------------- next part --------------

An HTML attachment was scrubbed...

URL: <https://urldefense.com/v3/__https://lists.isc.org/pipermail/bind-users/attachments/20230927/e1047578/attachment.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy0JBiH4$<https://urldefense.com/v3/__https:/lists.isc.org/pipermail/bind-users/attachments/20230927/e1047578/attachment.htm__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy0JBiH4$>>



------------------------------



Subject: Digest Footer



_______________________________________________

ISC funds the development of this software with paid support subscriptions. Contact us at https://urldefense.com/v3/__https://www.isc.org/contact/__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXyPZ9N7x$<https://urldefense.com/v3/__https:/www.isc.org/contact/__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXyPZ9N7x$> for more information.



bind-users mailing list

bind-users at lists.isc.org<mailto:bind-users at lists.isc.org>

https://urldefense.com/v3/__https://lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/bind-users__;!!EQ82F1lD2o0!a9msf12u5aa_Cu5f9CthZ0ZyqFBX25xWXnaU6dvdABqajXCyBM38LJ_62y1tNeOcAaEAiZoaGDzTZE_9NQljXy3zF8_A$>





------------------------------



End of bind-users Digest, Vol 4327, Issue 1

*******************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230927/8e431299/attachment-0001.htm>

More information about the bind-users mailing list