BIND 9.2 and big dns traffic

[Mark_Andrews at isc.org]

> Hello,
> 
> I've installed a Bind ver 9.2 on a new server to do a CACHE DNS.
> 
> I was on a Bind 8.2.x and i've lots of clients which connect to our dns.
> 
> When we have routed  our old dns traffic on our new dns cache, named has
> troubles :
> 
> [...]
> Jan 14 18:39:45 nscache0 named[877]: client 62.23.36.19#44341: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.83.3#60866: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 62.23.94.195#4154: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 62.23.9.150#37066: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.50.250#1824: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 213.41.78.41#1797: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.108.103#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 213.41.40.72#53: no more
> recursive clients: quota reached
> Jan 14 18:39:45 nscache0 named[877]: client 195.68.64.5#4974: no more
> recursive clients: quota reached
> [...]
> 
> When i saw that, i 've read new options of Bind and i see the "tcp-clients
> number". I tried to specify a value (100, 1000, more and less) but i've
> always the same logs.

	options {
		recursive-clients number;
	};


> Morever, the processus "named" takes 98% CPU , isn't it stronge ?
> 
> Finally i've reinstalled a Bind ver 8.x instead of 9.x. and for this moment
> it is ok.
> 
> I d like to know how to support a _mass_ dns traffic on a bind 9.x.
> 
> Thanks.
> 
> nicolas
> 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org