CZ-NIC/knot

Knot DNS: High-performance authoritative-only DNS server. https://www.knot-dns.cz/support/

Daniel Salzman

@salzmdan

knotc conf-read zone.domain

Matyi Szabolcs

@matyi.szabolcs_gitlab

thanks +1

Matyi Szabolcs

@matyi.szabolcs_gitlab

Daniel, info

time systemctl start knot



real 11m33.969s

knot:~$ knotc stats
server.zone-count = 1005377

+1 thanks

Daniel Salzman

@salzmdan

Not bad! :-D

Matyi Szabolcs

@matyi.szabolcs_gitlab

yes because it is a weak virtual machine. Very good!

top

Daniel Salzman

@salzmdan

How many zones do you plan to have in production?

Matyi Szabolcs

@matyi.szabolcs_gitlab

the plan is 1M-1.5M zone.

and replacing powerdns + mysql

Matyi Szabolcs

@matyi.szabolcs_gitlab

the restart takes hours or never completes.

ali jedish

@alijedish_twitter

i have to questions regarding mod_stats,

1- I have configured statistics: section. When i dumps the stat file, it has a time, what timezone it is? I couldn't find any thing matches the time. It neither local timezone nor UTC, 2- When it dumps the stat file, does the counter reset? when the counter reset? does knotc stats command reset the counters?

Daniel Salzman

@salzmdan

1) The time zone should be at the end of the time string. Do you have any example?

2) The counters are zeroed only when the zone/server is reloaded/restarted.

ali jedish

@alijedish_twitter

1) thanks. I saw it, it is -0400. But I don't where it come from. Is it hard coded into the source because I don't have this timezone in my server

2) Is there anyway I can reset the counters? it makes life easier cause I have to figure out when I reloaded my zone and do some calculations afterward to get the correct number. It is even harder because the timestamp is also need some conversion.

Daniel Salzman

@salzmdan

1) No, it's not hardcoded. It should use the system timezone. Maybe it doesn't work correctly in your case. Will check the code.
2) Unfortunately, there is no other way how to reset the counters. It would be difficult to reset all counters concurrently without workers locking. I expect the timestamp transformation is easy in Python for example. Maybe we could add another timestamp format.

Daniel Salzman

@salzmdan

Btw, the current timestamp format is https://en.wikipedia.org/wiki/ISO_8601

Daniel Salzman

@salzmdan

What does timedatectl say? Or what is your OS?

Fred

@Fred81_gitlab

Any idea why kdig +short CHAOS TXT id.server @1.1.1.1 does not give any result, while the same command with Bind9's dig works?

Daniel Salzman

@salzmdan

Obviously kdig doesn't support CHAOS. Only CH :-)

$ kdig +short CH TXT id.server @1.1.1.1
"PRG"

I don't know where CHAOS comes from. RFC 1035 says:

3.2.4. CLASS values

CLASS fields appear in resource records.  The following CLASS mnemonics
and values are defined:

IN              1 the Internet

CS              2 the CSNET class (Obsolete - used only for examples in
                some obsolete RFCs)

CH              3 the CHAOS class

ali jedish

@alijedish_twitter

timedatectl: local time: Wed 2020-08-05 07:09:21 UTC
Universal time: Wed 2020-08-05 07:09:21 UTC
RTC time: Wed 2020-08-05 07:09:21
Time zone: Etc/UTC (UTC, +0000)
System clock synchronized: yes
NTP service: active
RTC in local TZ: no

Daniel Salzman

@salzmdan

Thanks. Interesting! What is your OS?

ali jedish

@alijedish_twitter

centos 7.

Daniel Salzman

@salzmdan

Okay. We would like to reproduce it. Any hints? :-)

ali jedish

@alijedish_twitter

I think that would be good, if it either reads the system timezone or having an option to set the timezone or set it to UTC.

I still would love to see counter-reset in knotc. because it really makes life easier, specially for companies that doing frequent zone refresh

Daniel Salzman

@salzmdan

Yes, we want it to work this way (without configuration). But it doesn't in your environment. We don't know why. So local reproduction would help.

ali jedish

@alijedish_twitter

do you want me to compile it? i've installed RPM package.

Daniel Salzman

@salzmdan

No, just tell me how you installed your OS. What does 'I don't have this timezone in my server' mean?

Usually the statistics values are stored in a time series database (e.g. InfluxDB), so you don't have to reset the counters. For larger deployments I would recommend reading the counters via control interface (e.g. https://github.com/salzmdan/knot_exporter)

Daniel Salzman

@salzmdan

Or you are not interested in the counter differences and you only want to reset the counters?

Daniel Salzman

@salzmdan

@alijedish_twitter There are a few things that would help us to know:

what do ls -l /etc/localtime and echo $TZ say?
did you do any changes to any of them recently (since you started knotd)?
if you configure knotd to log to a file, to stdout, or to stderr (testing one these is enough), what time data do you see in the logs?

ali jedish

@alijedish_twitter

/etc/localtime -> /usr/share/zoneinfo/Etc/UTC, $TZ is empty. and I didn't do any changes.

no, it is systlog

Daniel Salzman

@salzmdan

I know, but if you log to a file, the timestime is in the same format as for statistics. So if you could temporarily try it, it would be helpful for us.

ali jedish

@alijedish_twitter

sure, i'm doing it now

meanwhile is there any app to get the stat files and create some kind of table to graphs?

ali jedish

@alijedish_twitter

yes, it is the same, It doesn't show the timezone in the log file, but the time is UTC-0400

Daniel Salzman

@salzmdan

Thanks!
I don't know such an application. Automatic statistics dumping is rather good for simple activity logging. If you deploy the script above with prometheus, it will collect and visualise the data.

And in combination with Graphana it can provide very nice charts.

ali jedish

@alijedish_twitter

🙏 i should try it. I'm using DSC, but it uses lots of resources. i'll check this solution

Daniel Salzman

@salzmdan

@alijedish_twitter From which repository did you install Knot DNS 2.9.5? EPEL or our COPR?

mateusz

@mateusz834

Maybe somebody knows what is stored in the timer-db?
I dont see anything about that in the docs, there are only settings like max size, but nothing about for what it is used for.

Daniel Salzman

@salzmdan

Only zone event timestamps are stored there. Use https://gitlab.nic.cz/knot/knot-dns/-/blob/master/scripts/timerdb-info.py to dump the database

mateusz

@mateusz834

ok, thanks

Where communities thrive

People

Repo info

Activity