<p><br>
On Sep 2, 2011 9:48 AM, "TMK" <<a href="mailto:engtmk@gmail.com">engtmk@gmail.com</a>> wrote:<br>
><br>
> ---------- Forwarded message ----------<br>
> From: "Leonard Mills" <<a href="mailto:lenm@yahoo.com">lenm@yahoo.com</a>><br>
> Date: Aug 31, 2011 8:15 PM <br>
> Subject: Re: slow non-cached quries<br>
> To: "TMK" <<a href="mailto:engtmk@gmail.com">engtmk@gmail.com</a>><br>
><br>
> ;; Received 738 bytes from 192.112.36.4#53(<a href="http://G.ROOT-SERVERS.NET">G.ROOT-SERVERS.NET</a>) in 3133 ms<br>
><br>
> That pretty much is your delay. Look to your intermediate network segments, especially any smart devices.<br>
><br>
>> ________________________________<br>
>> From: TMK <<a href="mailto:engtmk@gmail.com">engtmk@gmail.com</a>><br>
>> To: Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>><br>
>> Cc: <a href="mailto:bind-users@isc.org">bind-users@isc.org</a><br>
>> Sent: Wednesday, August 31, 2011 4:44 AM<br>
>> Subject: Re: slow non-cached quries<br>
>><br>
>> On Tue, Aug 30, 2011 at 9:26 AM, TMK <<a href="mailto:engtmk@gmail.com">engtmk@gmail.com</a>> wrote:<br>
>><br>
>> ><br>
>> > On Tue, Aug 30, 2011 at 6:55 AM, Mark Andrews <<a href="mailto:marka@isc.org">marka@isc.org</a>> wrote:<br>
>> >><br>
>> >> In message <CAAKgOtgoifGPNEpHtX7++w=<a href="mailto:CZE1dPxX2DeGQ1PpkZ18dpuFPzA@mail.gmail.com">CZE1dPxX2DeGQ1PpkZ18dpuFPzA@mail.gmail.com</a>>,<br>
>> >> TMK writes:<br>
>> >>> Dears,<br>
>> >>><br>
>> >>> Probably this the thousand time you get these question. but our bind server<br>
>> >>> have slow response time for the non-cached entries.<br>
>> >>><br>
>> >>> I have run dig with +trace option and below is the result<br>
>> >>><br>
>> >>> ; <<>> DiG 9.8.0-P2 <<>> @<a href="http://127.0.0.1">127.0.0.1</a> <a href="http://www.google.com">www.google.com</a> +trace<br>
>> >>> ; (1 server found)<br>
>> >>> ;; global options: +cmd<br>
>> >>> . 2013 IN NS <a href="http://i.root-servers.net">i.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://g.root-servers.net">g.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://l.root-servers.net">l.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://m.root-servers.net">m.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://d.root-servers.net">d.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://b.root-servers.net">b.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://k.root-servers.net">k.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://j.root-servers.net">j.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://c.root-servers.net">c.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://a.root-servers.net">a.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://h.root-servers.net">h.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://e.root-servers.net">e.root-servers.net</a>.<br>
>> >>> . 2013 IN NS <a href="http://f.root-servers.net">f.root-servers.net</a>.<br>
>> >>> ;; Received 228 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms<br>
>> >>><br>
>> >>> com. 172800 IN NS <a href="http://a.gtld-servers.net">a.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://b.gtld-servers.net">b.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://c.gtld-servers.net">c.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://d.gtld-servers.net">d.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://e.gtld-servers.net">e.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://f.gtld-servers.net">f.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://g.gtld-servers.net">g.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://h.gtld-servers.net">h.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://i.gtld-servers.net">i.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://j.gtld-servers.net">j.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://k.gtld-servers.net">k.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://l.gtld-servers.net">l.gtld-servers.net</a>.<br>
>> >>> com. 172800 IN NS <a href="http://m.gtld-servers.net">m.gtld-servers.net</a>.<br>
>> >>> ;; Received 492 bytes from 199.7.83.42#53(<a href="http://l.root-servers.net">l.root-servers.net</a>) in 175 ms<br>
>> >>><br>
>> >>> <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns2.google.com">ns2.google.com</a>.<br>
>> >>> <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns1.google.com">ns1.google.com</a>.<br>
>> >>> <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns3.google.com">ns3.google.com</a>.<br>
>> >>> <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns4.google.com">ns4.google.com</a>.<br>
>> >>> ;; Received 168 bytes from 192.5.6.30#53(<a href="http://a.gtld-servers.net">a.gtld-servers.net</a>) in 250 ms<br>
>> >>><br>
>> >>> <a href="http://www.google.com">www.google.com</a>. 604800 IN CNAME <a href="http://www.l.google.com">www.l.google.com</a>.<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.106<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.104<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.147<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.99<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.103<br>
>> >>> <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 209.85.148.105<br>
>> >>> ;; Received 148 bytes from 216.239.34.10#53(<a href="http://ns2.google.com">ns2.google.com</a>) in 225 ms<br>
>> >>><br>
>> >>><br>
>> >>><br>
>> >>> we are running bind version "BIND 9.8.0-P2" on CentOS release 5.6 (Final)<br>
>> >>><br>
>> >>> the process is running as mutlithreaded and consuming total of 60% of cpu<br>
>> >>> utilization.<br>
>> >>><br>
>> >>> do we have network issue or performance bottleneck.<br>
>> >>><br>
>> >>> engtmk<br>
>> >><br>
>> >> To better match what a nameserver does, what does dig +trace +dnssec show?<br>
>> >><br>
>> >> dig +dnssec +trace <a href="http://www.google.com">www.google.com</a><br>
>> >><br>
>> >> Mark<br>
>> >> --<br>
>> >> Mark Andrews, ISC<br>
>> >> 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
>> >> PHONE: +61 2 9871 4742 INTERNET: <a href="mailto:marka@isc.org">marka@isc.org</a><br>
>> >><br>
>> ><br>
>> > Hi Mark,<br>
>> ><br>
>> > here is the output of the command<br>
>> ><br>
>> > dig @<a href="http://127.0.0.1">127.0.0.1</a> <a href="http://www.google.com">www.google.com</a> +trace +dnssec<br>
>> ><br>
>> > ; <<>> DiG 9.8.0-P2 <<>> @<a href="http://127.0.0.1">127.0.0.1</a> <a href="http://www.google.com">www.google.com</a> +trace +dnssec<br>
>> > ; (1 server found)<br>
>> > ;; global options: +cmd<br>
>> > . 3600000 IN NS <a href="http://F.ROOT-SERVERS.NET">F.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://A.ROOT-SERVERS.NET">A.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://C.ROOT-SERVERS.NET">C.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://J.ROOT-SERVERS.NET">J.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://B.ROOT-SERVERS.NET">B.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://K.ROOT-SERVERS.NET">K.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://E.ROOT-SERVERS.NET">E.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://D.ROOT-SERVERS.NET">D.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://G.ROOT-SERVERS.NET">G.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://L.ROOT-SERVERS.NET">L.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://M.ROOT-SERVERS.NET">M.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://I.ROOT-SERVERS.NET">I.ROOT-SERVERS.NET</a>.<br>
>> > . 3600000 IN NS <a href="http://H.ROOT-SERVERS.NET">H.ROOT-SERVERS.NET</a>.<br>
>> > ;; Received 255 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms<br>
>> ><br>
>> > com. 172800 IN NS <a href="http://f.gtld-servers.net">f.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://m.gtld-servers.net">m.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://g.gtld-servers.net">g.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://h.gtld-servers.net">h.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://e.gtld-servers.net">e.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://i.gtld-servers.net">i.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://a.gtld-servers.net">a.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://c.gtld-servers.net">c.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://j.gtld-servers.net">j.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://k.gtld-servers.net">k.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://l.gtld-servers.net">l.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://d.gtld-servers.net">d.gtld-servers.net</a>.<br>
>> > com. 172800 IN NS <a href="http://b.gtld-servers.net">b.gtld-servers.net</a>.<br>
>> > com. 86400 IN DS 30909 8 2<br>
>> > E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766<br>
>> > com. 86400 IN RRSIG DS 8 1 86400 20110906000000 20110829230000 39283<br>
>> > . FMBZuvFdyUZayOFWU4oa6qZKMu0lBn9Pn/6UH6PXmvfdJlS8VZbX4zYe<br>
>> > v0SGIWwA+cY3LGrICltTHfeZ0/eVfW6L0qzlT8o9EnSQgZ0ZyvqYrmIy<br>
>> > S30lwE/WobQVJSC9+ADyO2KNVw4Rpn570X5hTHeDnymoaiI4WxOBipIi v5I=<br>
>> > ;; Received 738 bytes from 192.112.36.4#53(<a href="http://G.ROOT-SERVERS.NET">G.ROOT-SERVERS.NET</a>) in 3133 ms<br>
>> ><br>
>> > ;; reply from unexpected source: 198.41.0.4#53, expected 192.54.112.30#53<br>
>> > ;; Warning: ID mismatch: expected ID 64144, got 28413<br>
>> > <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns2.google.com">ns2.google.com</a>.<br>
>> > <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns1.google.com">ns1.google.com</a>.<br>
>> > <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns3.google.com">ns3.google.com</a>.<br>
>> > <a href="http://google.com">google.com</a>. 172800 IN NS <a href="http://ns4.google.com">ns4.google.com</a>.<br>
>> > CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 -<br>
>> > CK6RMF8AE5PU47R8P3AL6T4Q26TL26S7 NS SOA RRSIG DNSKEY NSEC3PARAM<br>
>> > CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400<br>
>> > 20110906040911 20110830025911 41798 com.<br>
>> > Q+Oxc56WTwwyYy8hwvK+8883fMBCk5P3zkCCn6R0zXbjL666jzIQ3Fqx<br>
>> > hRY+f1DL/Mm4HVw7HY4rE1bAJ61iajFxMyys6P0fEGqx9jBM9gO/siE7<br>
>> > rTQilWZWwBFILlIggZFCt2Cpz0mJIplmJ4Ha5Anzp9Gt5f/TyBB3vu9c RKI=<br>
>> > S80V6798LSRQS3HJ5JTSO7N1LKSVIAT8.com. 86400 IN NSEC3 1 1 0 -<br>
>> > S8DHL9ICBS92G7KQAJCVT1CUQMAB9U5D NS DS RRSIG<br>
>> > S80V6798LSRQS3HJ5JTSO7N1LKSVIAT8.com. 86400 IN RRSIG NSEC3 8 2 86400<br>
>> > 20110906061156 20110830050156 41798 com.<br>
>> > OhtpbDJaFRivIbgQKiFy7NXXfZszjX3TxVmZG2pfTDQNP30kkw0w23IG<br>
>> > g57fMUpevAulJefCMKyPmCf+HJHVTBdH08i5rv97EZgo9oR0yvGlFn6J<br>
>> > I8bngApoNqmIhvkwZpbxF1iamCp1SDuep7XMLpGq6EhvpwV+vlAwms9N EIU=<br>
>> > ;; Received 664 bytes from 192.54.112.30#53(<a href="http://h.gtld-servers.net">h.gtld-servers.net</a>) in 215 ms<br>
>> ><br>
>> > <a href="http://www.google.com">www.google.com</a>. 604800 IN CNAME <a href="http://www.l.google.com">www.l.google.com</a>.<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.147<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.104<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.106<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.105<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.99<br>
>> > <a href="http://www.l.google.com">www.l.google.com</a>. 300 IN A 74.125.39.103<br>
>> > ;; Received 148 bytes from 216.239.34.10#53(<a href="http://ns2.google.com">ns2.google.com</a>) in 158 ms<br>
>> ><br>
>> > Regards,<br>
>> > engtmk<br>
>> ><br>
>><br>
>> dears any help would be much appreciated<br>
>> _______________________________________________<br>
>> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
>><br>
>> bind-users mailing list<br>
>> <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
>> <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
>><br>
>></p>
<p>Would creating master cash DNS and configure all other cache DNS to only forward requests to it would solve this issue</p>