Help needed with failed queries - SERVFAIL

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Help needed with failed queries - SERVFAIL

Olaf Frączyk
Hello,

I'm running bind on CentOS 8:

bind-9.11.13-6.el8_2.1.x86_64

 From time to time I get SERVFAIL responses.

When the client queries second time, it gets the answer, so this are
transient errors. I don't see any pattern for them.

This happens probably a few times a day - enough to make it annoying in
long term. The worst is on Windows clients, as they need to do "ipconfig
/flushdns".

However I don't know the cause, running debug I got this:

client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: query failed (SERVFAIL) for piekielni.pl/IN/A at
../../../bin/named/query.c:9385
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: error
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: send
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: sendto
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: senddone
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: next
client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
internaldns-view: endrequest
fetch completed at ../../../lib/dns/resolver.c:2870 for piekielni.pl/A
in 0.707553: failure/success
[domain:piekielni.pl,referral:2,restart:1,qrysent:0,timeout:0,lame
:0,quota:0,neterr:0,badresp:0,adberr:0,findfail:2,valfail:0]

Why qrysent is 0, but findfail 2?

I'm not very familiar with the output, maybe someone could explain me
what is happening.

Best regards,

Olaf Frączyk

--
NAVI Sp. z o.o.
Promienista 5/1
60-288 Poznań

mobile: +48609769035
phone: +48616622881
fax: +48616622882
http://www.navi.pl

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Help needed with failed queries - SERVFAIL

Olaf Frączyk
Hello,

One more thought - This behaviour didn't happen with bind 9.9 - on CentOS 7.

Best regards,

Olaf Frączyk

NAVI Sp. z o.o.
Promienista 5/1
60-288 Poznań

mobile: +48609769035
phone: +48616622881
fax: +48616622882
http://www.navi.pl

On 2020-10-04 01:39, Olaf Frączyk wrote:

> Hello,
>
> I'm running bind on CentOS 8:
>
> bind-9.11.13-6.el8_2.1.x86_64
>
> From time to time I get SERVFAIL responses.
>
> When the client queries second time, it gets the answer, so this are
> transient errors. I don't see any pattern for them.
>
> This happens probably a few times a day - enough to make it annoying
> in long term. The worst is on Windows clients, as they need to do
> "ipconfig /flushdns".
>
> However I don't know the cause, running debug I got this:
>
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: query failed (SERVFAIL) for piekielni.pl/IN/A at
> ../../../bin/named/query.c:9385
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: error
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: send
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: sendto
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: senddone
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: next
> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
> internaldns-view: endrequest
> fetch completed at ../../../lib/dns/resolver.c:2870 for piekielni.pl/A
> in 0.707553: failure/success
> [domain:piekielni.pl,referral:2,restart:1,qrysent:0,timeout:0,lame
> :0,quota:0,neterr:0,badresp:0,adberr:0,findfail:2,valfail:0]
>
> Why qrysent is 0, but findfail 2?
>
> I'm not very familiar with the output, maybe someone could explain me
> what is happening.
>
> Best regards,
>
> Olaf Frączyk
>
> --
> NAVI Sp. z o.o.
> Promienista 5/1
> 60-288 Poznań
>
> mobile: +48609769035
> phone: +48616622881
> fax: +48616622882
> http://www.navi.pl
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/bind-users
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Help needed with failed queries - SERVFAIL - RESOLVED

Olaf Frączyk
Hello,

I have found the issue. Maybe it helps someone else.

In the logs above, there were "exceeded max queries resolving".

The default max-recursion-queries is 75.

I have increased it to 100 and it seems it helped. So I set it up to 150
to be on the safe side.

Best regards,

Olaf

NAVI Sp. z o.o.
Promienista 5/1
60-288 Poznań

mobile: +48609769035
phone: +48616622881
fax: +48616622882
http://www.navi.pl

On 2020-10-04 15:24, Olaf Frączyk wrote:

> Hello,
>
> One more thought - This behaviour didn't happen with bind 9.9 - on
> CentOS 7.
>
> Best regards,
>
> Olaf Frączyk
>
> NAVI Sp. z o.o.
> Promienista 5/1
> 60-288 Poznań
>
> mobile: +48609769035
> phone: +48616622881
> fax: +48616622882
> http://www.navi.pl
>
> On 2020-10-04 01:39, Olaf Frączyk wrote:
>> Hello,
>>
>> I'm running bind on CentOS 8:
>>
>> bind-9.11.13-6.el8_2.1.x86_64
>>
>> From time to time I get SERVFAIL responses.
>>
>> When the client queries second time, it gets the answer, so this are
>> transient errors. I don't see any pattern for them.
>>
>> This happens probably a few times a day - enough to make it annoying
>> in long term. The worst is on Windows clients, as they need to do
>> "ipconfig /flushdns".
>>
>> However I don't know the cause, running debug I got this:
>>
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: query failed (SERVFAIL) for piekielni.pl/IN/A at
>> ../../../bin/named/query.c:9385
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: error
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: send
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: sendto
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: senddone
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: next
>> client @0x7fcb50128510 192.168.217.121#34656 (piekielni.pl): view
>> internaldns-view: endrequest
>> fetch completed at ../../../lib/dns/resolver.c:2870 for
>> piekielni.pl/A in 0.707553: failure/success
>> [domain:piekielni.pl,referral:2,restart:1,qrysent:0,timeout:0,lame
>> :0,quota:0,neterr:0,badresp:0,adberr:0,findfail:2,valfail:0]
>>
>> Why qrysent is 0, but findfail 2?
>>
>> I'm not very familiar with the output, maybe someone could explain me
>> what is happening.
>>
>> Best regards,
>>
>> Olaf Frączyk
>>
>> --
>> NAVI Sp. z o.o.
>> Promienista 5/1
>> 60-288 Poznań
>>
>> mobile: +48609769035
>> phone: +48616622881
>> fax: +48616622882
>> http://www.navi.pl
>>
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
>> unsubscribe from this list
>>
>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>
>>
>> bind-users mailing list
>> [hidden email]
>> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/bind-users
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users