Min/Max Refresh and Notify

Kevin Darcy kcd at daimlerchrysler.com
Fri Dec 13 19:56:59 UTC 2002


I guess I missed the addition of those new BIND 9 parameters. Sorry. 
 From your results, it sounds like NOTIFY overrides them, so you'll have 
to turn of NOTIFYs from the master.

                                                                        
                                    - Kevin

Mike Diggins wrote:

>On Fri, 13 Dec 2002, Kevin Darcy wrote:
>
>  
>
>>Mike Diggins wrote:
>>
>>    
>>
>>>I have a slave name server configured with a zone using min and max
>>>refresh time.
>>>
>>>      
>>>
>>What do you mean by "min and max refresh time"? There is only one
>>REFRESH field in an SOA record.
>>    
>>
>
>It's a named.conf parameter in BIND 9. I'm using it on a test BIND server
>to keep the mail abuse rbl from updating so often. The config below limits
>it to twice a day. It's not under my control when it happens but that's
>okay. I started sending notifies to this test slave server from the master
>server and discovered it's back to updating every two hours.
>
>zone "rbl-plus.mail-abuse.org" {
>        type slave;
>        file "data/rbl-plus.domain";
>        allow-transfer { none; };
>        max-refresh-time 43200;
>        min-refresh-time 43200;
>        masters {
>                192.168.1.1
>        };
>};
>
>-Mike
>
>
>  
>
>>>I was using it to limit the number of times the zone updates
>>>to just two times a day.
>>>
>>>Question: If the master name server is configured to send notifies to the
>>>slave when an update to the zone occurs, will the slave update the zone
>>>anyway? That appears to be what's happening but I want to be sure. If it
>>>is true, would turning off notifies to that slave for that one zone stop
>>>that from happening?
>>>
>>>      
>>>
>>Yes, you could turn off NOTIFYs and that would greatly reduce the number
>>of refresh checks that the slave performs. But, be aware that the
>>frequency with which BIND slaves perform refresh checks has a random
>>element to it. This is done deliberately to prevent slave "cycling"
>>which causes spikes of refresh-check and/or zone-transfer activity. So
>>you can never *exactly* control when the slave will perform
>>refresh-checks when you rely on the REFRESH setting alone.
>>
>>Perhaps you might consider turning off NOTIFYs to the slave within BIND
>>and then using an artificial non-BIND method of sending NOTIFYs to the
>>slave at specific intervals. I seem to recall there was a utility out
>>there that could generate NOTIFYs, but I don't have a pointer to it
>>handy. Perhaps someone else on the list could provide that information...
>>
>>
>>                                    - Kevin
>>
>>    
>>
>>>      
>>>
>>
>>
>>    
>>
>
>
>        **     *** ******    Mike Diggins
>       ****  **** ********  Analyst, Networks
>      ** ******* **     ** Computing and Information Services
>     **   ** ** **     ** McMaster University, Hamilton, Ontario
>    **      ** **     ** (905) 525-9140 Ext. 27471   ABB131A
>   **      ** ********* Fax: (905) 528-3773
>  ***    *** ********  Email: diggins at mcmaster.ca
>
>
>
>
>
>
>  
>





More information about the bind-users mailing list