Category: DNS

What to do if dnssec-keygen hangs forever

By , May 2, 2017

Problem:

On some systems when you are trying to generate dnssec keys using dnssec-keygen, it just hangs (seemingly) forever.

As per Alexander Gurvitz’s post in the Ubuntu forums:

It is NOT a bug.
In order to generate SECURE keys, dnssec-keygen reads /dev/random, which will block until there’s enough entropy available on your system. Some systems have very little entropy and thus dnssec-keygen may take forever.
Possible solutions:
1. apt-get install haveged
haveged daemon supplies lots of entropy to /dev/random.

2. dnssec-keygen -r /dev/urandom
Will use “non-blocking” pseudo-random device (lower security).

3. Move mouse and tap on keyboard – kernel uses this as entropy source.

4. Buy a hardware entropy device.

Easiest/best solution is #1, most expedient if you can’t even do that is #2.

How to link multiple domains to a website

By , April 24, 2010

Nick from the U.K asks:

My company recently purchased a couple domains and we want those to link to our current website. Eg. example.com will transfer to example.co.uk instantly. How can I do this?

Many Thanks,
Nick

This is similar to an earlier post How do I point “www.domain.com” at “domain.com” or vice-versa?, but since we’re going across multiple domains, we should also think about a couple additional issues.

Read more »

When the internet doesn't see an update to your zonefile

By , April 22, 2010

Every once in awhile we see a situation where somebody changes the IP address one of their hostname (A records) points at and the rest of the world still sees the old address.

Common causes of this include:

Read more »

How do I point "www.domain.com" at "domain.com" or vice-versa?

comments Comments Off on How do I point "www.domain.com" at "domain.com" or vice-versa?
By , April 22, 2010

You may have your webserver setup for either www.example.com or just example.com and you want it to work either way, whether people type in the “www” part of your domain or not.

(By way of info, “www” is purely a convention, it isn’t in itself necessary to “make your domain work” over the web).

There are a couple ways to do this:

Read more »