<div dir="ltr"><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">Hi,</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">Recently we have enabled stale serve on our recursive BIND 9.18.41 (Extended Support Version), the service crashes after a few minutes, showing the following lines inside the log files:</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">*Sample from named.run logs showing the recursion loop:</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">03-May-2026 07:37:41.553 client: info: client @0x7f32d0d4c498 10.40.153.193#14013 (<a href="http://api.al-array.com">api.al-array.com</a>): view our-users: recursion loop detected<br>03-May-2026 07:37:41.553 client: info: client @0x7f32d0993c98 10.36.16.177#10683 (<a href="http://api.al-array.com">api.al-array.com</a>): view our-users: recursion loop detected<br>03-May-2026 07:37:41.702 client: info: client @0x7f32d0da7098 10.36.24.213#47838 (<a href="http://ninja12002.serv00.net">ninja12002.serv00.net</a>): view our-users: recursion loop detected<br>03-May-2026 07:37:41.717 client: info: client @0x7f32d25e4098 10.48.72.221#37292 (<a href="http://hayward.walsivrtgam.net">hayward.walsivrtgam.net</a>): view our-users: recursion loop detected</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">*Sample from default logs showing the assertion failure:

</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">default.1:03-May-2026 07:38:30.213 general: critical: /opt/isc/isc-bind/root/usr/lib64/<a href="http://libisc-9.18.41.so">libisc-9.18.41.so</a>(isc_assertion_failed+0xe) [0x7f32d615538e]<br>default.1:03-May-2026 07:38:30.213 general: critical: exiting (due to assertion failure)</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">*Our resolver is receiving around 20k QPS.</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">*Below is the configuration<br>## Global Named Configuration<br>options {<br>        directory "/var/opt/isc/scls/isc-bind/named/data";<br>        listen-on { 127.0.0.1; 192.168.20.2; };<br>        allow-transfer {"none";};<br>        dnssec-validation auto;<br>        querylog no;<br>        recursive-clients 10000;<br>        dnstap {all;};<br>        dnstap-output file "named-logs/dnstap.file";<br>        dnstap-identity "<a href="http://ns02.ourdomain.net">ns02.ourdomain.net</a>";<br>        deny-answer-addresses { deny-answer-referral-acl; };<br>};<br><br># For monitoring systems to fetch named statistics<br>statistics-channels {<br>  inet 192.168.20.2 port 8080 allow {<a href="http://192.168.10.0/24;">192.168.10.0/24;</a>};<br>  inet 127.0.0.1 port 8083 allow { any; };<br>};<br><br># Logging module<br>include "/etc/opt/isc/scls/isc-bind/logging.conf";<br><br><br>#### Clients ACLs ####<br><br>acl deny-answer-referral-acl {<br>        <a href="http://127.0.0.1/32">127.0.0.1/32</a>;<br>        <a href="http://192.168.20.2/32">192.168.20.2/32</a>;<br>};<br><br>acl our-users-acl {<br>        127.0.0.1;<br>        <a href="http://192.168.0.0/16">192.168.0.0/16</a>;<br>};<br><br>#### Users ####<br>view "our-users" {<br>        match-clients { our-users-acl; };<br>        allow-query { our-users-acl; };<br>        recursion yes;<br>        stale-answer-enable yes;<br>        stale-cache-enable yes;<br>        max-stale-ttl 12H;<br>        stale-answer-ttl 30s;<br>        stale-refresh-time 30s;<br>        stale-answer-client-timeout 0;<br><br>zone "<a href="http://ourdomain.net">ourdomain.net</a>" {<br>        type master;<br>        file "zones/<a href="http://ourdomain.net">ourdomain.net</a>";<br>        zone-statistics yes;<br>        };<br><br>zone "." IN {<br>        type hint;<br>        file "named.root";<br>        };<br>};<br><br>#### END OF NAMED CONFIGURATIONS<br><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">Appreciate the support</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default">Thank you</div><div style="font-family:tahoma,sans-serif;color:rgb(7,55,99)" class="gmail_default"><br></div><br></div>