Tracking Down Odd bind Behavior

[Tim Daneliuk]

I have a bind slave instance running on FreeBSD 13-STABLE.  Periodically (after
a few days of perfect operation), it loses its ability to resolve at
least some names - in this case, git.freebsd.org.  When I look at the logs, I see this:

==> /var/log/named/query-errors <==
14-Aug-2021 16:48:33.376 query-errors: info: client @0x80949d560 127.0.0.1#30170 (git.freebsd.org): view internal: query failed (failure
) for git.freebsd.org/IN/AAAA at query.c:7376


An rndc flush or complete restart of this slave instance fixes the problem.

The installed version details follow.  Helpful hints to fix would be
welcome:


Aug 14 17:07:03 ozzie named[32292]: starting BIND 9.16.19 (Stable Release) <id:df0e751>
Aug 14 17:07:03 ozzie named[32292]: running on FreeBSD amd64 13.0-STABLE FreeBSD 13.0-STABLE #0 stable/13-n246370-74ff46ac172: Sun Jul 1
8 12:02:34 CDT 2021     toor at ozzie.tundraware.com:/usr1/obj/usr1/13-stable/amd64.amd64/sys/OZZIE
Aug 14 17:07:03 ozzie named[32292]: built with '--disable-linux-caps' '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--wit
h-dlopen=yes' '--with-libxml2' '--with-openssl=/usr' '--with-readline=-L/usr/local/lib -ledit' '--with-dlz-filesystem=yes' '--disable-dn
stap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--with-libidn2=/usr/local' '--with-json-c' '--
disable-largefile' '--with-lmdb=/usr/local' '--disable-native-pkcs11' '--without-python' '--disable-querytrace' '--enable-tcp-fastopen'
'--disable-symtable' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd13
.0' 'build_alias=amd64-portbld-freebsd13.0' 'CC=cc' 'CFLAGS=-O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -isystem /usr/local/inclu
de -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c -fstack-protector-strong ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-DLIBICONV_PL
UG -isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf'
Aug 14 17:07:03 ozzie named[32292]: running as: named -4 -u bind -c /usr/local/etc/namedb/named.conf
Aug 14 17:07:03 ozzie named[32292]: compiled by CLANG FreeBSD Clang 11.0.1 (git at github.com:llvm/llvm-project.git llvmorg-11.0.1-0-g43ff7
5f2c3fe)
Aug 14 17:07:03 ozzie named[32292]: compiled with OpenSSL version: OpenSSL 1.1.1k-freebsd  25 Mar 2021
Aug 14 17:07:03 ozzie named[32292]: linked to OpenSSL version: OpenSSL 1.1.1k-freebsd  25 Mar 2021
Aug 14 17:07:03 ozzie named[32292]: compiled with libxml2 version: 2.9.12
Aug 14 17:07:03 ozzie named[32292]: linked to libxml2 version: 20912
Aug 14 17:07:03 ozzie named[32292]: compiled with json-c version: 0.15
Aug 14 17:07:03 ozzie named[32292]: linked to json-c version: 0.15
Aug 14 17:07:03 ozzie named[32292]: compiled with zlib version: 1.2.11
Aug 14 17:07:03 ozzie named[32292]: linked to zlib version: 1.2.11
Aug 14 17:07:03 ozzie named[32292]: ----------------------------------------------------
Aug 14 17:07:03 ozzie named[32292]: BIND 9 is maintained by Internet Systems Consortium,
Aug 14 17:07:03 ozzie named[32292]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Aug 14 17:07:03 ozzie named[32292]: corporation.  Support and training for BIND 9 are
Aug 14 17:07:03 ozzie named[32292]: available at https://www.isc.org/support
Aug 14 17:07:03 ozzie named[32292]: ----------------------------------------------------
Aug 14 17:07:03 ozzie named[32292]: command channel listening on 127.0.0.1#953
Aug 14 17:07:03 ozzie named[32292]: 14-Aug-2021 17:07:03.167 general: notice: all zones loaded
Aug 14 17:07:03 ozzie named[32292]: 14-Aug-2021 17:07:03.167 general: notice: running

TIA,
----------------------------------------------------------------------------
Tim Daneliuk     tundra at tundraware.com
PGP Key:         http://www.tundraware.com/PGP/