multi-master and ixfr-from-differences: failed: new serial (2010060900) out of range"

[Mark Andrews]

In message <20100625072717.GC18513 at fantomas.sk>, Matus UHLAR - fantomas writes:
> > > On 10.06.10 09:34, Matus UHLAR - fantomas wrote:
> > > > Jun  9 23:11:58 mydb02 named[1427]: general: error: zone ./IN: ixfr-fro
> m-differences: failed: new serial (2010060900) out of range [2010060901 - 415
> 7544547]
> 
> > In message <20100625060415.GA18513 at fantomas.sk>, Matus UHLAR - fantomas wri
> tes:
> > > We get these quite often. Any idea where could be the problem?
> 
> On 25.06.10 16:10, Mark Andrews wrote:
> > Turn off try-tcp-refresh.
> 
> Is there better documentation for the try-tcp-refresh option?
> While I have no reason not to trust you, I would like to understand the
> problem itself. Is looksa likt the tcp refresh would transfer the zone
> independently on SOA serial arithmetics.

With "try-tcp-refresh yes;" the udp retries fail to the master that
is behind.  Named does a axfr from that master and you get the message
you see.

The following may also help as it turns on SOA before AXFR for the
ixfr-from-differences case.  This has not been tested.

Mark

Index: lib/dns/zone.c
===================================================================
RCS file: /proj/cvs/prod/bind9/lib/dns/zone.c,v
retrieving revision 1.540.2.26
diff -u -r1.540.2.26 zone.c
--- lib/dns/zone.c	2 Jun 2010 01:00:28 -0000	1.540.2.26
+++ lib/dns/zone.c	25 Jun 2010 07:47:41 -0000
@@ -11946,7 +11950,10 @@
 	} else if (DNS_ZONE_OPTION(zone, DNS_ZONEOPT_IXFRFROMDIFFS)) {
 		dns_zone_log(zone, ISC_LOG_DEBUG(1), "ixfr-from-differences "
 			     "set, requesting AXFR from %s", master);
-		xfrtype = dns_rdatatype_axfr;
+		if (DNS_ZONE_FLAG(zone, DNS_ZONEFLG_SOABEFOREAXFR))
+			xfrtype = dns_rdatatype_soa;
+		else
+			xfrtype = dns_rdatatype_axfr;
 	} else if (DNS_ZONE_FLAG(zone, DNS_ZONEFLG_FORCEXFER)) {
 		dns_zone_log(zone, ISC_LOG_DEBUG(1),
 			     "forced reload, requesting AXFR of "
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org