nsd users - Aug 2014 - response ip address and max-ips

Hi,

I need to solve following problem.

To assign more than 8 listen address. There are 2 solutions, but only
one working at this moment.

a)
recompile the NSD with directive --with-max-ips=X, where X is enough big
for my purposes. For testing is this good, but in production we have
several distribution providing the DNS service and do the recompiling
and packaging for all of them is time consuming.

b)
listen to all interfaces. This does not work, while in this case NSD
choose as response source address the primary address of the outgoing
interface. This is  for both IPv4 and IPv6. As this is default behavior
of the OS I found it a bug.

I did tests for BIND9, Knot DNS and YADIFA. Only the BIND9 is able to
deal with the "bind all" interfaces and response source address.


So I propose to change default max-ips from 8 to 16. The 8 was enough
for IPv4 only but if you have also IPv6 you will reach the limit sooner.

On the other hand I do not understand why there is a fixed list length
and not linked list for all structures. In that case it would be easy to
fix the source address in "bind all" mode iterating the list of the IP
and bind all of them.


	best regards
		Peter Hudec

On Fri, 22 Aug 2014, Peter Hudec wrote:
> a)
> recompile the NSD with directive --with-max-ips=X, where X is enough big
> for my purposes. For testing is this good, but in production we have
> several distribution providing the DNS service and do the recompiling
> and packaging for all of them is time consuming.
We added this a few months ago and put it at 1024 in epel/fedora. Was
that number not big enough for you?
> On the other hand I do not understand why there is a fixed list length
> and not linked list for all structures. In that case it would be easy to
> fix the source address in "bind all" mode iterating the list of
the IP
> and bind all of them.
It would be nice indeed not to have this artificial limit.

Does nsd4 still have this ?

Paul