100% CPU / wedge with 9.8.3-P4 & RPZ?

[Augie Schwer]

Coincidentally yesterday ( 15, March ) at 1700 PST four of our name servers
were knocked off-line with similar large CPU spikes and no corresponding
spike in query requests.

We run Bind 9.9.2-P1 with RPZ feeds from Spamhaus and SURBL.

We are still investigating some other potential sources of the problem, but
I read your message this morning with great interest.




On Sat, Mar 16, 2013 at 4:39 AM, Phil Mayers <p.mayers at imperial.ac.uk>wrote:

> All,
>
> In the last 12 hours, we've had repeated instances of named getting
> wedged. The symptoms are:
>
>  * named consuming nearly 100% CPU, all in user-time
>  * lots of queries apparently not processed, and based on query logging, a
> sharp drop in the rate of queries that are
>  * a very sharp drop (almost a complete halt, in fact) in the rate of RPZ
> "hits" in the logs at the exact time this happens
>  * no other interesting logs, as far as I can see
>
> Re-starting the named process clears it.
>
> I can't see anything in the release notes for 9.8.4/9.8.5 - any ideas?
>
> This is with the Spamhaus DBL, in case it matters.
>
> Cheers,
> Phil
> ______________________________**_________________
> Please visit https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users>to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/**listinfo/bind-users<https://lists.isc.org/mailman/listinfo/bind-users>
>



-- 
Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130316/cce37719/attachment.html>