Thursday, July 7, 2016

Shot Names in BIND DNS take too Long

I have Setup A Bind DNS , where I am trying to put an entry for resolving the short name. This get resolved but take too long and sometime the DNS times out.
The short name is s3.ngsfdellpe



Entries from named.conf



options {
listen-on port 53 { 127.0.0.1;10.209.194.15; };
listen-on-v6 port 53 { ::1; };

directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {any;};
allow-recursion {any;};
//recursion no;

//dnssec-enable yes;
//dnssec-validation yes;

//dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {

file "data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};



zone"vxctf8500.com" IN {
type master;
file "forward.vxctf8500.com";
allow-update { none; };
};
zone"106.209.10.in-addr.arpa" IN {
type master;
file "reverse.vxctf8500.com";
allow-update { none; };

};


Forward zones Files ::



$TTL 1D
@ IN SOA ns1.vxctf8500.com. root.vxctf8500.com. (
0 ; serial
1D ; refresh
1H ; retry

1W ; expire
3H ) ; minimum

IN NS vxctf8500.com.
IN A 10.209.194.15



ns1 IN A 10.209.194.15


s3.ngsfdellpe IN A 10.209.106.59
s3.ngsfdellpe IN A 10.209.106.53
s3.ngsfdellpe IN A 10.209.106.54
s3.ngsfdellpe IN A 10.209.106.55
s3.ngsfdellpe IN A 10.209.106.56


Reverse zone files ::



$TTL 1D

@ IN SOA ns1.vxctf8500.com. root.vxctf8500.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum


IN NS vxctf8500.com.
15 IN PTR ns1.vxctf8500.com.




59 IN PTR s3.ngsfdellpe.
53 IN PTR s3.ngsfdellpe.
54 IN PTR s3.ngsfdellpe.
55 IN PTR s3.ngsfdellpe.
56 IN PTR s3.ngsfdellpe.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...