Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-11 Thread Thomas Mieslinger via Pdns-users
On 9/10/20 3:40 PM, Christian Degenkolb wrote: what is a reasonable low value for udp-truncation-threshold? I tried with 900 and 600 (as low as half the default value) but found no improvements. I use 1220 because the always recommended 1232 does not work for me with IPv6. Some months ago the

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-11 Thread Otto Moerbeek via Pdns-users
On Thu, Sep 10, 2020 at 03:40:54PM +0200, Christian Degenkolb via Pdns-users wrote: > Hi Thomas, > > what is a reasonable low value for udp-truncation-threshold? I tried with > 900 and 600 (as low as half the default value) but found no improvements. Try edns-outgoing-bufsize, that is the one t

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-10 Thread Christian Degenkolb via Pdns-users
Hi Thomas, what is a reasonable low value for udp-truncation-threshold? I tried with 900 and 600 (as low as half the default value) but found no improvements. Also I don't think this is a vmware.com problem since I have the same problem with multiple domains. To illustrate I found the tool

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-09 Thread Thomas Mieslinger via Pdns-users
Hi Christian, Hetzner might filter ip fragments. Please try if your situation gets better if you set udp-truncation-threshold to a reasonable low value. By default pdns-recursor does dnssec. I would like to suggest to set +dnssec on your dig queries. A possible workaround for the vmware.com pro

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-08 Thread Christian Degenkolb via Pdns-users
Hi, I set the trace=yes option in the recursor config an redid the tests for pubs.vmware.com. The log can be found here https://paste.debian.net/hidden/07526601/ I found two timeouts in the logs Line 41: Sep 8 10:21:54 rho pdns_recursor[25208]: [3] pubs.vmware.com: Resolved 'vmware.com' NS

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-08 Thread Otto Moerbeek via Pdns-users
On Tue, Sep 08, 2020 at 09:22:31AM +0200, Christian Degenkolb wrote: > (send again, first answer was not send cc to the ML) > > Hi, > > sorry for not sending any configs. pdns_recursor runs more or less with the > vanilla config with the following changes: > > forward-zones-recurse=zen.spamhaus

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-08 Thread Christian Degenkolb via Pdns-users
(send again, first answer was not send cc to the ML) Hi, sorry for not sending any configs. pdns_recursor runs more or less with the vanilla config with the following changes: forward-zones-recurse=zen.spamhaus.org=1.1.1.1;1.0.0.1 (thats why I wanted to use the local recursor, as mentioned t

Re: [Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-04 Thread Otto Moerbeek via Pdns-users
On Wed, Sep 02, 2020 at 09:44:37AM +0200, Christian Degenkolb via Pdns-users wrote: > Hi, > > I hope somebody on the ML can help me figure out what I'm doing wrong. > I have a local pdns_recursor (version 4.1.11-1+deb10u1 from debian 10) > runing and added it at the top of my /etc/resolve.conf a

[Pdns-users] Slow query and SERVERFAIL from local pdns_recursor

2020-09-02 Thread Christian Degenkolb via Pdns-users
Hi, I hope somebody on the ML can help me figure out what I'm doing wrong. I have a local pdns_recursor (version 4.1.11-1+deb10u1 from debian 10) runing and added it at the top of my /etc/resolve.conf as 127.0.0.1. However I see some strange SERVERFAIL resolves happening and all in all a slow