<div dir="ltr">Hi all, I've recently upgraded from a CentOS5 install of BIND 9 (bind-9.3.6-20.P1.el5_8.6) to a CentOS6 install (bind-9.8.2-0.17.rc1.el6_4.4.x86_64) for one of my two nameservers. The config I'm using is nearly identical (added rate limiting only) and the server that has not yet been updated is still having no problems. The upgraded server will stop receiving updates for zones after 1-3 days of completely normal operation. Restarting named (but not reloading) corrects the problem for another 1-3 days.<div>
<br></div><div>I have logs showing what happens before and after a restart of the service. I've changed the IPs in these logs and the config file which follows. In them, 10.0.x.1 represents a master server and 10.10.10.1 is the slave having issues. These logs are basically "tail -f named.log | grep <a href="http://example.com">example.com</a>" where <a href="http://example.com">example.com</a> is the test domain I'm using (it happens with all domains). I update the zone file's serial on 10.0.4.1, then do an rndc reload there, these are the logs that come up:</div>
<div><br></div><div><div>Before named restart</div><div>=====</div><div>29-Jul-2013 10:17:29.567 notify: info: client 10.0.4.1#37224: received notify for zone '<a href="http://example.com">example.com</a>'</div><div>
29-Jul-2013 10:17:30.069 notify: info: client 10.0.4.1#32206: received notify for zone '<a href="http://example.com">example.com</a>'</div><div>29-Jul-2013 10:17:30.069 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: notify from 10.0.4.1#32206: refresh in progress, refresh check queued</div>
<div>29-Jul-2013 10:18:59.568 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: refresh: retry limit for master 10.0.1.1#53 exceeded (source 10.10.10.1#0)</div><div>29-Jul-2013 10:18:59.568 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: Transfer started.</div>
<div>29-Jul-2013 10:18:59.569 xfer-in: info: transfer of '<a href="http://example.com/IN">example.com/IN</a>' from 10.0.1.1#53: connected using 10.10.10.1#55992</div><div>29-Jul-2013 10:18:59.570 xfer-in: info: transfer of '<a href="http://example.com/IN">example.com/IN</a>' from 10.0.1.1#53: Transfer completed: 0 messages, 1 records, 0 bytes, 0.001 secs (0 bytes/sec)</div>
<div><br></div><div>After named restart</div><div>=====</div><div>29-Jul-2013 10:43:34.879 notify: info: client 10.0.4.1#42576: received notify for zone '<a href="http://example.com">example.com</a>'</div><div>29-Jul-2013 10:43:34.890 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: serial number (2011061500) received from master 10.0.1.1#53 < ours (2013022611)</div>
<div>29-Jul-2013 10:43:34.900 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: refresh: non-authoritative answer from master 10.0.2.1#53 (source 10.10.10.1#0)</div><div>29-Jul-2013 10:43:34.904 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: refresh: non-authoritative answer from master 10.0.3.1#53 (source 10.10.10.1#0)</div>
<div>29-Jul-2013 10:43:34.915 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: Transfer started.</div><div>29-Jul-2013 10:43:34.916 xfer-in: info: transfer of '<a href="http://example.com/IN">example.com/IN</a>' from 10.0.4.1#53: connected using 10.10.10.1#44081</div>
<div>29-Jul-2013 10:43:34.919 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: transferred serial 2013072910</div><div>29-Jul-2013 10:43:34.919 xfer-in: info: transfer of '<a href="http://example.com/IN">example.com/IN</a>' from 10.0.4.1#53: Transfer completed: 1 messages, 23 records, 719 bytes, 0.002 secs (359500 bytes/sec)</div>
<div>29-Jul-2013 10:43:35.379 notify: info: client 10.0.4.1#43038: received notify for zone '<a href="http://example.com">example.com</a>'</div><div>29-Jul-2013 10:43:35.380 general: info: zone <a href="http://example.com/IN">example.com/IN</a>: notify from 10.0.4.1#43038: zone is up to date</div>
</div><div><br></div><div><br></div><div><br></div><div>In case it's necessary, here is the config for the slave where these logs were produced:</div><div><br></div><div><div>controls {</div><div>inet 127.0.0.1 port 953</div>
<div>allow { 127.0.0.1; } keys { "rndc-key"; };</div><div>};</div><div><br></div><div>include "/etc/rndc.key";</div><div><br></div><div>acl "notifytrusted" { 10.0.1.1; 10.0.2.1; 10.0.3.1; 10.0.4.1; 10.0.5.1; }; </div>
<div><br></div><div>logging{</div><div> channel simple_log {</div><div> file "/var/log/named.log" versions 3 size 65m;</div><div> #severity warning;</div><div> severity debug 0;</div><div> print-time yes;</div>
<div> print-severity yes;</div><div> print-category yes;</div><div> };</div><div> category default{</div><div> simple_log;</div><div> };</div><div>};</div><div><br></div><div>zone "." {</div><div> type hint;</div>
<div> file "/var/named/<a href="http://named.ca">named.ca</a>";</div><div>};</div><div><br></div><div>options {</div><div> statistics-file "/var/named/data/named_stats.txt";</div><div> directory "/var/named";</div>
<div> forwarders {10.0.1.1; 10.0.2.1; 10.0.3.1; 10.0.4.1; 10.0.5.1; };</div><div> forward only;</div><div> transfers-in 50000;</div><div> transfers-per-ns 50000;</div><div> serial-query-rate 10000;</div>
<div> transfer-source 10.10.10.1;</div><div> use-alt-transfer-source no;</div><div> rate-limit {</div><div> responses-per-second 200;</div><div> window 5;</div><div> };</div>
<div> allow-transfer { none; };</div><div> notify no;</div><div> allow-notify {notifytrusted; };</div><div>};</div></div><div><br></div><div><br></div><div>After this is just zone definitions. Has anyone else seen this problem?</div>
<div><div><br></div>-- <br>Best Regards, <br>Brandon W.<br>Tier 3 System Administrator<br>InMotion Hosting Inc.<br> <br>888-321-4678<br>757-416-6575 (Int'l)<br>NEW: 24x7 EMAIL and PHONE Technical Support<br> <br>Did you know?<br>
We'll Build, Update and Promote Your Site for You! Visit <a href="http://www.inmotionhosting.com/webdesign" target="_blank">www.inmotionhosting.com/webdesign</a><br>Answers to commonly asked questions, as well as other useful tools, can be found at <a href="http://support.inmotionhosting.com" target="_blank">http://support.inmotionhosting.com</a><br>
<br>How am I doing? Please feel free to email my manager at <a href="mailto:manager_feedback@inmotion.net" target="_blank">manager_feedback@inmotion.net</a>
</div></div>