Slave zone intermittently not refreshing

Mark Andrews marka at isc.org
Tue May 13 00:03:44 UTC 2014


In message <alpine.LSU.2.00.1405121147340.1509 at hermes-1.csi.cam.ac.uk>, Tony Finch writes:
> Mart van de Wege <mvdwege at gmail.com> wrote:
> >
> > The only difference I *can* see is that this particular slave zone
> > occasionally gets a lot of updates in a single day, which is when this
> > problem seems to be triggered.
> 
> Is there an MTU problem between your slave and the master? Or a problem
> with fragmented UDP? I wonder if something is screwing up large IXFR
> packets, causing your slave to get stuck - that might explain the
> timeout messages in the log.
> 
> It is a bit difficult to properly test IXFR because dig will only do it
> over TCP (it ignores the +notcp option for AXFR and IXFR). And you can't
> force named to use TCP for IXFR, so getting named and dig to behave the
> same is tricky...
 
2275.  [func]          Add support to dig to perform IXFR queries over UDP.
                       [RT #17235]

DiG has supported ixfr over udp since 2007.  It just defaults to TCP.
you have to disable TCP after specifying ixfr.

	e.g.
		dig ixfr=2007111878 dv.isc.org +notcp

> You could try setting "request-ixfr no;" to see if AXFR (over TCP) works
> better.
> 
> Tony.
> -- 
> f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
> Shannon: Northwest 5 to 7, decreasing 4 or 5. Rough. Showers, squally at
> first. Good.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list