From owner-freebsd-ports@FreeBSD.ORG Fri Dec 12 11:08:04 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 88ECDE65 for ; Fri, 12 Dec 2014 11:08:04 +0000 (UTC) Received: from prod2.absolight.net (mx3.absolight.net [IPv6:2a01:678:2:100::25]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4AB3F7DD for ; Fri, 12 Dec 2014 11:08:04 +0000 (UTC) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id DC124BDC24; Fri, 12 Dec 2014 12:08:00 +0100 (CET) Received: from atuin.in.mat.cc (atuin.in.mat.cc [79.143.241.205]) by prod2.absolight.net (Postfix) with ESMTPA id D06E7BDC1D; Fri, 12 Dec 2014 12:08:00 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by atuin.in.mat.cc (Postfix) with ESMTP id 7B7351EE6648; Fri, 12 Dec 2014 12:07:57 +0100 (CET) Date: Fri, 12 Dec 2014 12:07:57 +0100 From: Mathieu Arnold To: Scot Hetzel , FreeBSD Ports Subject: Re: Unbound/NSD rc startup order Message-ID: In-Reply-To: References: <20141211105139.GA1270@xtaz.uk> <20141212075328.GB52267@xtaz.uk> <548AC04A.8000804@bluerosetech.com> X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Cc: Matt Smith X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Dec 2014 11:08:04 -0000 +--On 12 d=C3=A9cembre 2014 05:00:00 -0600 Scot Hetzel wrote: | On Fri, Dec 12, 2014 at 4:15 AM, Darren Pilgrim | wrote |> On 12/11/2014 11:53 PM, Matt Smith wrote: |>>=20 |>> Somebody has let me know that I made an obvious mistake in the above. I |>> meant that the default rcorder is to run Unbound first followed by NSD. |>> So to clarify I think in the default situation Unbound starts first, |>> contacts NSD and gets no answer because it hasn't been started yet and |>> then fails in some way. Whereas if NSD is running first then Unbound = is |>> happy. |>=20 |>=20 |> Unbound requires SERVERS, but nsd requires LOGIN, a much later |> checkpoint. |>=20 |> The fix would be adding an rcorder override mechanism whereby one could |> specify additional constraints (like unbound REQUIRE nsd). If there's |> interest for this, I can see about a patch. |>=20 | Would it be better to add: |=20 |# BEFORE: unbound |=20 | to the dns/nsd rc.d script? Well, the thing is, a resolver is required way before an authoritative server is. --=20 Mathieu Arnold