Which one performs good RPZ or Zones with Include statment

Grant Taylor gtaylor at tnetconsulting.net
Wed Apr 18 18:46:46 UTC 2018


On 04/18/2018 11:52 AM, Blason R wrote:
> Pertaining to my other thread since I am building sinkhole server which 
> will eventually have around 0.5 million zones or may be 1 Million which 
> one would you think will perform better?
> 
> RPZ or include statements? I have 8 Core Processor and 32 GB of RAM

Which holds more watter; a banana or a hammer?

An RPZ is a specail type of zone and include statements are ways to 
create a zone from multiple files.

You can easily have your RPZ zone file include contents from other files.

I suspect you are meaning to ask, which performs better, a single RPZ 
covering LOTS of domains, or multiple discreet zones with each covering 
one domain (including sub-domains).  —  I suspect that RPZ will win in 
that I expect it will require fewer resources.  I say this because a 
single RPZ can have records that impact multiple domains in the single 
zone file, compared to needing multiple zones (and files) using the 
traditional non-RPZ method.



-- 
Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3982 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180418/e6e4cc33/attachment.bin>


More information about the bind-users mailing list