Maintained by: NLnet Labs

[Unbound-users] Using pyunbound with chaos

Chris Hills
Tue Jun 16 16:04:28 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 16/06/09 15:46, W.C.A. Wijngaards wrote:
 > Or, well, whatever the operator configured, see the unbound options
 > 'version' and 'hide-version'.

Indeed, I thought that went without saying.

 > Perhaps you want this piece of python? :
 > 	(cin, cout) = os.popen2("dig @" + dnsserver + " version.bind chaos txt")
 > 	result = cout.readlines()
 > 	cin.close()
 > 	cout.close()
 > 	print result

I specifically wanted to use a library for this because spawning dig is 
inefficient, which makes a big difference when you are looking up a few 
million records :-) Also, dig has the nasty habit of stalling when it 
gets stuck trying to locate the dns name. Although you can specify 
+tries=1 and +timeout=1, it still blocks whilst resolving the A/AAAA 
address of the target dns name (for example, if the target is 
ns1.something.example.com., and the two dns servers for 
something.example.com. are unavailable, it will hang for a lot longer 
than 2 seconds).

I have looked at several libraries for this, and so far none have met 
all my needs (multiple target servers, IPv6, chaos and asynchronous), 
and from your reply I can only infer that Unbound will not be suitable 
either :-( Back to the drawing board! Thanks for your replies.

Regards,

Chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
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=By7J
-----END PGP SIGNATURE-----