Simple DNS |
Post Reply ![]() |
Author | |
jerbo128 ![]() Senior Member ![]() ![]() Joined: 06 March 2006 Status: Offline Points: 178 |
![]() ![]() ![]() ![]() ![]() Posted: 17 September 2007 at 7:01pm |
We're having issues with SFE pounding Microsoft DNS so bad that we have to restart the DNS hourly.
We're looking at SimpleDNS - hoping it will be more robust and stand up to the spamfilter.
Anyone use Simple DNS Plus or have comments on what you do use?
thanks
jerbo128
|
|
![]() |
|
WebGuyz ![]() Senior Member ![]() Joined: 09 May 2005 Location: United States Status: Offline Points: 348 |
![]() ![]() ![]() ![]() ![]() |
We've been using SimpleDNS for years and its been great. We have 2 DNS servers and both average about 20-30 queries per second with spikes to 75 or more.
Another nice feature is if you have 2 of them and create a new record on the primary it will create the account on the secondary automatically as well as keep it in sync. So all you have to worry about is 1 DNS server and the slave will mirror the master.
|
|
http://www.webguyz.net
|
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
jerbo128,
How many messages / minute do you have that MS DNS can not handle it? I have what I feel is fairly high traffic and have zero issues with DNS. I have 2 MS-DNS resolvers and 1 BSD and a backup.
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
jerbo128 ![]() Senior Member ![]() ![]() Joined: 06 March 2006 Status: Offline Points: 178 |
![]() ![]() ![]() ![]() ![]() |
Desperado -
We average 30-50 connections at a time to the SFE. I am checking 5 MAPS and 2 SURBL Lists, plus reverse dns, mx, spf, etc.
When it fails, the service remains running, but I get a lot of timeout, or dns server reports query errors. I had a batch file setup to restart the dns service every hour, and that helped alot. But it was still something that I had to keep an eye on.
I liked the idea of SimpleDNS due to the fact that WebGuyz
![]() We did switch to the simpleDNS trial, and after 48 hours of running it, have not had to restart it at all. It is showing 30-40 queries/sec with spikes to 70.
|
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
Jerbo128,
I guess our setup is not the same. We do not have ANY zones on our resolvers. They are used for our servers to do DNS lookups only (Caching Servers) so I am comparing Apples and Oranges!
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
WebGuyz ![]() Senior Member ![]() Joined: 09 May 2005 Location: United States Status: Offline Points: 348 |
![]() ![]() ![]() ![]() ![]() |
jerbo128,
Are you using a forwarder like your ISP's DNS server? If so you might try removing it to make sure the issue is not related to that.
We have about 455 domains we are authoritive for and have 2 SFE's that stay busy all the time being handled by 2 SimpleDNS servers and it something I never even think about because it just works.
|
|
http://www.webguyz.net
|
|
![]() |
|
jerbo128 ![]() Senior Member ![]() ![]() Joined: 06 March 2006 Status: Offline Points: 178 |
![]() ![]() ![]() ![]() ![]() |
Webguyz,
We tried the forwarders once before, and found that it was much more efficient to just resolve the domains ourselves. It created a lot of timeouts in the SF.
So far, I am thrilled with the Simple DNS. The GUI alone is so much better. Not to mention the performance.
|
|
![]() |
|
__M__ ![]() Groupie ![]() Joined: 30 August 2006 Location: Australia Status: Offline Points: 75 |
![]() ![]() ![]() ![]() ![]() |
I evaluated Simple DNS Plus some time ago and whilst it looks very good the thing that put me off using it is the 14 day trial period. Call me paranoid but if I'm going to run an application for DNS services I'm going to want to beat it to death for a bit more than 14 days before I commit to purchasing the product. So I never really got serious with it.
|
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
WebGuys,
We ARE an ISP and do not use forwarders. Our resolvers (caching DNS servers) look directly at the root servers.
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
WebGuyz ![]() Senior Member ![]() Joined: 09 May 2005 Location: United States Status: Offline Points: 348 |
![]() ![]() ![]() ![]() ![]() |
Desperado,
Was replying to jerbo128, I should have been more specific.
Some smaller shops still use their ISP's DNS but with the load caused by RBL and SURBL lookups they might start getting resource limited by their ISP's.
|
|
http://www.webguyz.net
|
|
![]() |
|
dcook ![]() Senior Member ![]() ![]() Joined: 31 January 2005 Location: United States Status: Offline Points: 174 |
![]() ![]() ![]() ![]() ![]() |
We use Simple DNS and have for three years. It works well with Spamfilter. You can also run a separate instance or two of the Microsoft DNS in just for your spamfilters.
|
|
Dwight
www.vividmix.com |
|
![]() |
|
IKILLSPAM1 ![]() Groupie ![]() Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
![]() ![]() ![]() ![]() ![]() |
I've used Simple DNS for approx 5 years as well. We act as a small ISP serving all our clients hosting needs. I run 3 NS servers, each on seperate internet connections, and one at a totally different location for redundancy.
You update NS1's records, click Tools, reload DNS records and then all 3 get sync'd. Never have had any issues with crashing and I mean never. Had issues with NAT where our main NS server was on the internal network and workstations would look to it for records of websites we host and get returned the external IP which of course doesnt work. Simple DNS added a feature not too long ago that allows you to map an external IP to an internal IP. Pretty cool. So most of our website reside on the same external ip and internal ip, so one simple nat map fixed that problem.
My NS1 Simple DNS reports uptime 183 days 12,972,858 Requests. Judge for yourself if thats stable :)
|
|
![]() |
|
Desperado ![]() Senior Member ![]() ![]() Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
![]() ![]() ![]() ![]() ![]() |
IKILLSPAM1,
In cases like this, which are common especially in co-locations where the IP's are private inside, your firewall should do "DNS ReWrite" which globally solves this issue. In the case of Cisco PIX firewalls, you can do DNS ReWrite on a rule by rule basis.
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
![]() |
|
__M__ ![]() Groupie ![]() Joined: 30 August 2006 Location: Australia Status: Offline Points: 75 |
![]() ![]() ![]() ![]() ![]() |
Now with IKILLSPAM1's also adding his recommendation I might go and have another look at Simple DNS. |
|
![]() |
Post Reply ![]() |
|
Tweet
|
Forum Jump | Forum Permissions ![]() You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.207 seconds.