Early adopter support thread

m3047 / rear_view_rpz

Turn your recursive DNS (BIND) server into a network investigation enabler with DnsTap and RPZ. Make PTR recs great again!

Apache License 2.0

12 stars 2 forks source link

Early adopter support thread #1

Closed m3047 closed 2 years ago

m3047 commented 2 years ago

Hi all, thanks for the interest! I'm pretty sure I don't know all of you. I'm creating this issue, if you need help with a specific problem or have a question, feel free to ask here. (If you find a bug, by all means create a new issue.)

So my immediate plans are as follows:

Productionize it, get it into my production environment. (That should generate some additional doc.)
Improve coroutine error logging. Sometimes there's an exception and the trace doesn't display until the script exits. (This should generate some code changes.)
Test with additional versions of python and dnspython. (Probably additional code and some doc.)

m3047 commented 2 years ago

Coroutine error logging

7493264 adds exception handlers which print a traceback and stop the event loop (eventually) causing the script to exit.

m3047 commented 2 years ago

Case Study

Writeup of the deployment in my environment is here: https://github.com/m3047/rear_view_rpz/blob/main/install/Optional_DNS_Service.md

m3047 commented 2 years ago

Latest version testing

I did a smoketest with:

python 3.8.12
dnspython 2.1.0
bind 9.16.23

Works for me! :-/ I thought maybe I'd have to do something conditional depending on the version of dnspython but nope. The specific concern was with dynamic updates, you can see the specific comment at rearview/rpz.py:38.

If it doesn't work for you, please open a ticket or submit a PR.

I'm going to call this issue thread done.