Unreachable IP in allow transfer

Barry Margolin barmar at alum.mit.edu
Tue Apr 7 16:34:46 UTC 2009


In article <grfimj$1gjg$1 at sf1.isc.org>,
 "Hayward, Bruce" <Bruce.Hayward at mtsallstream.com> wrote:

> We were chasing why we were seeing slow responses when busier (running
> 9.5.1-P1/Solaris 10).
> 
> =20
> 
> In our named.conf we had an allow-transfer for IP 123.123.123.123 for
> zone fredderf.com (IP/names have been changed to protect the innocent):
> 
> =20
> 
> If the IP was not reachable  we see a timeout where it tried for 224.694
> secs.
> 
> =20
> 
> I believe that this was holding up one or two processes - so the rest
> had to wait
> 
> =20
> 
> >From the xfer.log
> 
> 31-Mar-2009 06:38:50.591 client 123.123.123.123#54651: received notify
> for zone 'fredderf.com'
> 
> 31-Mar-2009 06:38:51.482 transfer of ' fredderf.com/IN' from
> 123.123.123.123#53: failed to connect: timed out
> 
> 31-Mar-2009 06:38:51.482 transfer of 'fredderf.com/IN' from
> 123.123.123.123#53: Transfer completed: 0 messages, 0 records, 0 bytes,
> 224.694 secs (0 bytes/sec)
> 
> =20
> 
> Thoughts?

This look more like the result of "masters { 123.123.123.123;}".  If a 
slave can't connect to the master, it will time out when it tries to 
perform a zone transfer.

I'm not sure why this would cause slow response times, though.  I assume 
the zone transfer is done in a separate thread from query processing.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list