<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr"><meta http-equiv="content-type" content="text/html; charset=utf-8">Ok, so according to zonemaster: <a href="https://zonemaster.net/en/result/7fc39ff8fc1766ac">https://zonemaster.net/en/result/7fc39ff8fc1766ac</a> all the nameservers are in the same zone. I am guessing that any intermittent failure can cause a lot of outgoing queries.</div><div dir="ltr"><br></div><div dir="ltr">Anyway - since you are hitting the 32 limit, perhaps bumping the limit to 100 (the value before) would help in your case? I am guessing the resolver is being used for a limited set of clients and the chance of this specific abuse is quite low.</div><div dir="ltr"><br></div><div dir="ltr"><a href="https://bind9.readthedocs.io/en/v9.18.29/notes.html#notes-for-bind-9-18-29">https://bind9.readthedocs.io/en/v9.18.29/notes.html#notes-for-bind-9-18-29</a></div><div dir="ltr"><br></div><div dir="ltr">Ondrej<br id="lineBreakAtBeginningOfSignature"><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 6. 9. 2024, at 21:13, Ondřej Surý <ondrej@isc.org> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>Now the question remains - why? I don’t really see a reason for this behavior from where I tested it, so what is the traffic between your recursor and the Internet during the time this happens?</span><br><span></span><br><span>Ondřej</span><br><span>--</span><br><span>Ondřej Surý — ISC (He/Him)</span><br><span></span><br><span>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</span><br><span></span><br><blockquote type="cite"><span>On 6. 9. 2024, at 20:54, Peter <pmc@citylink.dinoex.sub.org> wrote:</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Sep 6 20:31:59 <local1.debug> pole named[71152]: resolver: debug 3: exceeded max queries resolving 'ns1.edns.t-ipnet.de/AAAA' (querycount=33, maxqueries=32)</span><br></blockquote><span></span><br><span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></body></html>