Help needed with failed queries - SERVFAIL - RESOLVED

Olaf Frączyk olaf at navi.pl
Sun Oct 4 14:46:21 UTC 2020


Hello,

I have found the issue. Maybe it helps someone else.

In the logs above, there were "exceeded max queries resolving".

The default max-recursion-queries is 75.

I have increased it to 100 and it seems it helped. So I set it up to 150 
to be on the safe side.

Best regards,

Olaf

NAVI Sp. z o.o.
Promienista 5/1
60-288 Poznań

mobile: +48609769035
phone: +48616622881
fax: +48616622882
http://www.navi.pl

On 2020-10-04 15:24, Olaf Frączyk wrote:
> Hello,
>
> One more thought - This behaviour didn't happen with bind 9.9 - on 
> CentOS 7.
>
> Best regards,
>
> Olaf Frączyk
>
> NAVI Sp. z o.o.
> Promienista 5/1
> 60-288 Poznań
>
> mobile: +48609769035
> phone: +48616622881
> fax: +48616622882
> http://www.navi.pl
>
> On 2020-10-04 01:39, Olaf Frączyk wrote:
>> Hello,
>>
>> I'm running bind on CentOS 8:
>>
>> bind-9.11.13-6.el8_2.1.x86_64
>>
>> From time to time I get SERVFAIL responses.
>>
>> When the client queries second time, it gets the answer, so this are 
>> transient errors. I don't see any pattern for them.
>>
>> This happens probably a few times a day - enough to make it annoying 
>> in long term. The worst is on Windows clients, as they need to do 
>> "ipconfig /flushdns".
>>
>> However I don't know the cause, running debug I got this:
>>
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: query failed (SERVFAIL) for piekielni.pl/IN/A at 
>> ../../../bin/named/query.c:9385
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: error
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: send
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: sendto
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: senddone
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: next
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view 
>> internaldns-view: endrequest
>> fetch completed at ../../../lib/dns/resolver.c:2870 for 
>> piekielni.pl/A in 0.707553: failure/success 
>> [domain:piekielni.pl,referral:2,restart:1,qrysent:0,timeout:0,lame
>> :0,quota:0,neterr:0,badresp:0,adberr:0,findfail:2,valfail:0]
>>
>> Why qrysent is 0, but findfail 2?
>>
>> I'm not very familiar with the output, maybe someone could explain me 
>> what is happening.
>>
>> Best regards,
>>
>> Olaf Frączyk
>>
>> -- 
>> NAVI Sp. z o.o.
>> Promienista 5/1
>> 60-288 Poznań
>>
>> mobile: +48609769035
>> phone: +48616622881
>> fax: +48616622882
>> http://www.navi.pl
>>
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>> unsubscribe from this list
>>
>> ISC funds the development of this software with paid support 
>> subscriptions. Contact us at https://www.isc.org/contact/ for more 
>> information.
>>
>>
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
> unsubscribe from this list
>
> ISC funds the development of this software with paid support 
> subscriptions. Contact us at https://www.isc.org/contact/ for more 
> information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users


More information about the bind-users mailing list