<div data-ntes="ntes_mail_body_root" style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div id="spnEditorContent"><div style="margin: 0;"><pre style="font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-alternates: normal; font-size-adjust: none; font-language-override: normal; font-kerning: auto; font-optical-sizing: auto; font-feature-settings: normal; font-variation-settings: normal; font-variant-position: normal; font-variant-emoji: normal; font-stretch: normal; font-size: 13px; line-height: 22px; font-family: Menlo, Monaco, Consolas, "Cascadia Mono", "Ubuntu Mono", "DejaVu Sans Mono", "Liberation Mono", "JetBrains Mono", "Fira Code", Cousine, "Roboto Mono", "Courier New", Courier, sans-serif, system-ui; overflow: auto; text-wrap-mode: wrap; word-break: break-all; padding: 16px; color: rgb(15, 17, 21); margin: 0px !important;"> <span ntes_mm_email="ondrej@isc.org" contenteditable="false" style="background-color: rgb(224, 224, 224); border-radius: 2px; padding: 1px 2px; color: rgb(51, 51, 51); text-decoration: none;">@ondrej email account</span> <br></pre></div><div style="margin: 0;">Thanks, using stale-answer-client-timeout 0 works great, but because of this issue, I have to comment out the configuration and keep the default. Hope it can be fixed soon. Thanks again for your hard work.</div></div><div style="position:relative;zoom:1"></div><div id="divNeteaseMailCard"></div><div style="margin: 0;"><br></div><p>At 2026-03-24 19:42:37, "ondrej email account" <ondrej@isc.org> wrote:</p><blockquote id="isReplyContent" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><div class="apple-mail-supports-explicit-dark-mode"><div dir="auto">OK, this is already tracked as <a href="https://gitlab.isc.org/isc-projects/bind9/-/issues/5302">https://gitlab.isc.org/isc-projects/bind9/-/issues/5302</a><div><br></div><div>It will get fixed eventually.<br id="lineBreakAtBeginningOfSignature"><div dir="ltr"><span style="background-color: rgba(255, 255, 255, 0);">--<br>Ondřej Surý (He/Him)<br><span dir="ltr">ondrej@isc.org</span><br><br>ADHD brain at work: I sometimes lose track of my inbox. Please feel free to send a gentle nudge if you're waiting on a reply!<br><br>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</span><br style="font-size: 17px;"></div><div dir="ltr"><br><blockquote type="cite">On 24. 3. 2026, at 8:37, fitwateys <fitwate@163.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div data-ntes="ntes_mail_body_root" style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div id="spnEditorContent"><div style="margin: 0;"><br></div><div style="margin: 0;"># dig test.sys.srvtest</div><div style="margin: 0;"><br></div><div style="margin: 0;">; <<>> DiG 9.18.21 <<>> test.sys.srvtest</div><div style="margin: 0;">;; global options: +cmd</div><div style="margin: 0;">;; Got answer:</div><div style="margin: 0;">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5353</div><div style="margin: 0;">;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; OPT PSEUDOSECTION:</div><div style="margin: 0;">; EDNS: version: 0, flags:; udp: 1232</div><div style="margin: 0;">; COOKIE: 01bd17907fe8581b0100000069c21bbd544b417636a095f2 (good)</div><div style="margin: 0;">;; QUESTION SECTION:</div><div style="margin: 0;">;test.sys.srvtest. IN A</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; ANSWER SECTION:</div><div style="margin: 0;">test.sys.srvtest. 120 IN CNAME dns.sys.srvtest.</div><div style="margin: 0;">dns.sys.srvtest. 56 IN A 10.16.66.188</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; Query time: 17 msec</div><div style="margin: 0;">;; SERVER: 10.187.13.54#53(10.187.13.54) (UDP)</div><div style="margin: 0;">;; WHEN: Tue Mar 24 13:06:05 CST 2026</div><div style="margin: 0;">;; MSG SIZE rcvd: 103</div><div style="margin: 0;"><br></div><div style="margin: 0;"><br></div><div style="margin: 0;"># dig test.sys.srvtest</div><div style="margin: 0;"><br></div><div style="margin: 0;">; <<>> DiG 9.18.21 <<>> test.sys.srvtest</div><div style="margin: 0;">;; global options: +cmd</div><div style="margin: 0;">;; Got answer:</div><div style="margin: 0;">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22381</div><div style="margin: 0;">;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; OPT PSEUDOSECTION:</div><div style="margin: 0;">; EDNS: version: 0, flags:; udp: 1232</div><div style="margin: 0;">; COOKIE: 049a5278fe5ebcc50100000069c217f53f30f0e0fd022c17 (good)</div><div style="margin: 0;">; EDE: 3 (Stale Answer): (stale data prioritized over lookup)</div><div style="margin: 0;">;; QUESTION SECTION:</div><div style="margin: 0;">;test.sys.srvtest. IN A</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; ANSWER SECTION:</div><div style="margin: 0;">test.sys.srvtest. 63 IN A 127.0.0.130</div><div style="margin: 0;"><br></div><div style="margin: 0;">;; Query time: 0 msec</div><div style="margin: 0;">;; SERVER: 10.187.13.54#53(10.187.13.54) (UDP)</div><div style="margin: 0;">;; WHEN: Tue Mar 24 12:49:57 CST 2026</div><div style="margin: 0;">;; MSG SIZE rcvd: 125</div><div style="margin: 0;"><br></div><div style="margin: 0;"><br></div><div style="margin: 0;"><br></div><div style="margin: 0;"><br></div></div><div style="position:relative;zoom:1"></div><div></div><div style="margin: 0;"><br></div><pre><br>At 2026-03-24 14:33:49, "Ondřej Surý" <ondrej@isc.org> wrote:
>Hi,
>
>what does dns.sys.srvtest. return?
>
>Ondrej
>--
>Ondřej Surý (He/Him)
>ondrej@isc.org
>
>ADHD brain at work: I sometimes lose track of my inbox. Please feel free to send a gentle nudge if you're waiting on a reply!
>
>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.
>
>> On 24. 3. 2026, at 6:47, fitwateys <fitwate@163.com> wrote:
>>
>> Hi,
>> I encountered a persistent issue in BIND 9.20.20 where the cache does not refresh correctly when a domain changes from an A record to a CNAME record, but only when stale-answer-client-timeout is set to 0.Environment
>> • BIND Version: 9.20.20
>> • OS: openEuler 24.03 (LTS-SP1)
>> • Architecture: x86_64
>> • Installation: Compiled from source
>> Configuration
>> bind
>> options {
>> directory "/var/named";
>> listen-on port 53 { any; };
>> listen-on-v6 port 53 { any; };
>> allow-query { any; };
>> recursion yes;
>>
>> max-cache-ttl 86400;
>> min-cache-ttl 3;
>>
>> stale-cache-enable yes;
>> max-stale-ttl 90000;
>> stale-answer-enable yes;
>> stale-answer-ttl 63;
>> stale-answer-client-timeout 0; // problematic when set to 0
>> };
>> Problem Description
>> When a domain changes from an A record to a CNAME (e.g., test.sys.srvtest), BIND continues to return the stale A record from cache instead of refreshing to obtain the new CNAME.
>> • Before change:
>> test.sys.srvtest. 120 IN A 127.0.0.130
>> • After change:
>> test.sys.srvtest. 120 IN CNAME dns.sys.srvtest.
>> Even after the change, dig test.sys.srvtest returns:
>> text
>> test.sys.srvtest. 63 IN A 127.0.0.130 (stale)
>>
>> with the following EDNS option:
>> text
>> EDE: 3 (Stale Answer): (stale data prioritized over lookup)
>> This issue occurs only when stale-answer-client-timeout 0 is set.
>> If the line is commented out (default behavior), the cache refreshes correctly and the CNAME record is returned.Expected Behavior
>> With stale-answer-client-timeout 0, BIND should still attempt to refresh the cache and return the updated CNAME record after the TTL expires, rather than persistently serving stale A data.Additional Information
>> This seems to be a regression or edge case related to how stale answers are prioritized when the record type changes (A → CNAME) under aggressive stale-answer-client-timeout settings.
>> Let me know if you need further details or a test environment.
>> Thanks!
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
</pre></div></div></blockquote></div></div></div></blockquote></div>