Re: [Pdns-users] pdns_recursor issue

On Thu, Jan 26, 2023 at 10:57:21PM +0100, Arien Vijn wrote: > > > On 26 Jan 2023, at 19:00, Otto Moerbeek wrote: > > [...] > > > I expect the aggressive cache workaround to function. > > It seems so indeed. > > > What is happening is that a query of a non-existent type (e.g. ) > > for xd

Re: [Pdns-users] pdns_recursor issue

> On 26 Jan 2023, at 19:00, Otto Moerbeek wrote: [...] > I expect the aggressive cache workaround to function. It seems so indeed. > What is happening is that a query of a non-existent type (e.g. ) > for xdsl-c-serviceweb.gslb.kpn.com > > $ dig @n

Re: [Pdns-users] pdns_recursor issue

On Thu, Jan 26, 2023 at 05:37:12PM +0100, Arien Vijn via Pdns-users wrote: > Hi Peter, > > > On 26 Jan 2023, at 17:28, Peter van Dijk via Pdns-users > > wrote: > > [...] > > > After some brief investigation we somewhat suspect this is aggressive > > NSEC caching. Can you see if aggressive-nse

Re: [Pdns-users] pdns_recursor issue

Hi Peter, > On 26 Jan 2023, at 17:28, Peter van Dijk via Pdns-users > wrote: [...] > After some brief investigation we somewhat suspect this is aggressive > NSEC caching. Can you see if aggressive-nsec-cache-size=0 makes the > problem go away? Thanks! I'll add this line to the configuration r

Re: [Pdns-users] pdns_recursor issue

Hi Otto, Thanks for checking. Here is the configuration: local-address=0.0.0.0, :: local-port=53 query-local-address=::,0.0.0.0 threads=8 allow-from=127.0.0.0/8, ::1/128, 10.0.0.0/8, 87.251.42.0/26, 2001:7b8:650::/48 dnssec=validate lua-config-file=/etc/powerdns/recursor.lua webserver=yes web

Re: [Pdns-users] pdns_recursor issue

Hi Arien, On Thu, 2023-01-26 at 13:30 +0100, Arien Vijn via Pdns-users wrote: > Greetings, > > We recently upgraded pdns_recursor from version 4.4.5 to 4.8.0. It seems that > we run in into the following issue ever since. > > 1/ Client queries for an A-record for xdsl-serviceweb.kpn.com. > 2/ R

Re: [Pdns-users] pdns_recursor issue

Hi, Please show your configuration. I do not think your analysis is to the point. If I repeat a scenario, I see a correct retrieval of the A record. So we have to find out what is different in your case. -Otto On Thu, Jan 26, 2023 at 01:30:54PM +0100, Arien Vijn via Pdns-users wrote:

[Pdns-users] pdns_recursor issue

Greetings, We recently upgraded pdns_recursor from version 4.4.5 to 4.8.0. It seems that we run in into the following issue ever since. 1/ Client queries for an A-record for xdsl-serviceweb.kpn.com. 2/ Recursor queries the domain tree and receives the CNAME-record that points to: xdsl-c-service