Re: Problems after upgrade to 9.10.4

2d] NS ns.netestate.de., foaf-search.net. [2d] NS ns1.netestate.de., A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. [1d] Type50, A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. [1d] RRSIG, MI79E5R1F40QCUPOIBCU93AR486VI70V.net. [1d] Type50, MI79E5R1F40QCUPOIBCU93AR486VI70V.net. [1d] RRSIG ar: . OPT UDPsize

Re: Problems after upgrade to 9.10.4

investigated. It could be a low probability error affecting many deployments. I tried running bind with dnssec-enable no and still the exchanges with tld nameservers involved many packets and TCP sessions. Why? cu, brunni On Thu, May 05, 2016 at 09:31:06AM +0200, Michael Brunnbauer wrote: > >

Re: Problems after upgrade to 9.10.4

hi all, On Thu, May 05, 2016 at 09:31:06AM +0200, Michael Brunnbauer wrote: > after upgrading from bind 9.10.3-P2 to 9.10.4, I have intermittent DNS lookup > errors on one of my servers with low DNS load. The server is not > authoritative > for the affected zones but the authorita

Problems after upgrade to 9.10.4

ting this problem. I guess I should at least increase the TTL for the NS records when this problem is solved? thnx, cu, brunni -- ++ Michael Brunnbauer ++ netEstate GmbH ++ Geisenhausener Straße 11a ++ 81379 München ++ Tel +49 89 32 19 77 80 ++ Fax +49 89 32 19 77 89 ++ E-Mail bru...@netestate.de ++ htt

Re: Recursive bind becomes unresponsive with high load

Hello Mathew, On Sat, Apr 02, 2016 at 03:16:59PM +0200, Michael Brunnbauer wrote: > > # watch -n 0.1 'cat /proc/net/udp | grep ":0035 : "' > > I can see the error count on the lo interface growing when the queue is at > > :00040200

Re: Recursive bind becomes unresponsive with high load

Hello Mike, connection tracking does not seem to be the issue here. I see no messages about packets dropped from the kernel and I have not loaded the relevant modules (iptable_nat, ip_conntrack, etc.) anyway. Regards, Michael Brunnbauer On Fri, Apr 01, 2016 at 09:48:01PM +, Mike Mitchell

Re: Recursive bind becomes unresponsive with high load

time the problem occurs. There is still more than 30% CPU idle time and no significant IO (wa is below 5%). Am I running into the limits of my system here? Regards, Michael Brunnbauer -- ++ Michael Brunnbauer ++ netEstate GmbH ++ Geisenhausener Straße 11a ++ 81379 München ++ Tel +

Re: Recursive bind becomes unresponsive with high load

I do not see more than 200 TCP connections in TIME_WAIT status when the problem occurs and not more than 5000 TCP/UDP connections with port 53. cu, brunni -- ++ Michael Brunnbauer ++ netEstate GmbH ++ Geisenhausener Straße 11a ++ 81379 München ++ Tel +49 89 32 19 77 80 ++ Fax +49 89 32

Re: Recursive bind becomes unresponsive with high load

hi all, On Thu, Mar 31, 2016 at 07:32:21PM +0200, Michael Brunnbauer wrote: > Is is possible that is this connected to rndc stats? I will stop doing > rndc stats for a while to test (it currently runs every minute). Not doing rndc stats did not prevent the problem. Any other ideas? R

Re: Recursive bind becomes unresponsive with high load

can use up to 65536 file descriptors and the failed lookups also occur in other processes that only do one lookup. Regards, Michael Brunnbauer -- ++ Michael Brunnbauer ++ netEstate GmbH ++ Geisenhausener Straße 11a ++ 81379 München ++ Tel +49 89 32 19 77 80 ++ Fax +49 89 32 19 77 89 ++ E-Mail bru.

Re: Recursive bind becomes unresponsive with high load

Hello Tony, On Thu, Mar 31, 2016 at 05:08:43PM +0100, Tony Finch wrote: > Michael Brunnbauer wrote: > > > > I am using bind on a server that does massive crawling with a multithreaded > > Java app. This server occasionally has to do lookups for hosts in our local > &

Re: Recursive bind becomes unresponsive with high load

ammer them. Our database is cluttered with chinese linkfarms and the DNS queries for them tend to fail early and often or take a long time. I may be able to address this in some way so that those queries are reduced but I would also like to have a DNS server that can handle high load and it

Recursive bind becomes unresponsive with high load

IPv4 sockets active 6829 TCP/IPv4 sockets active 1 Raw sockets active ++ Per Zone Query Statistics ++ --- Statistics Dump --- (1459439461) Regards, Michael Brunnbauer -- ++ Michael Brunnbauer ++ netEstate GmbH ++ Geisenhausener Straße 11a ++ 81379 München +