nanog mailing list archives

Re: DNS cache Validation


From: Mark Tinka <mark.tinka () seacom mu>
Date: Tue, 19 May 2020 11:11:27 +0200



On 19/May/20 10:31, Mukund Sivaraman wrote:


(1) Check the size of your cache and ensure that it is not too small and
that it is bound. The max-cache-size config option will limit it. In old
versions of named, there was no limit. Current versions have an
automatic limit. You want this size to be at least a few hundred MB for
a small LAN and larger if it is a widely used resolver. Check the "cache
records deleted due to memory exhaustion" counter in rndc stats output.

In current versions of BIND, my understanding is that the default value
is 90% of the detected physical memory, in case nothing specific is
defined by the operator.

Mark.


Current thread: