Maintained by: NLnet Labs

[Unbound-users] No answers from unbound occasionally

W.C.A. Wijngaards
Thu Jun 4 15:10:57 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Attila Nagy wrote:
> Hello,
> I've made a capture and according to that, it was about 150 ms between
> unbound's query and the response. I think it's pretty normal for
> nameservers on the other side of the globe.

Yes, however unbound keeps a rtt profile for each server.  So if the
server has a very fast RTT then unbound will consider 150msec to be very
late (for that server), and retries before that time is up.

>> So, it is normal that some authority servers are slow.  Thus produce
>> timeouts.  20 / 4000 is 0.5% of cases for you, this looks very
>> reasonable to me.
>>   
> Yes, maybe, my problem is that I can see unanswered queries. If I
> understand it correctly, the above situation should not result in a loss
> of answer towards the resolver client.

No it should not.

> And this is my primary concern, because I don't understand why those
> queries are left unanswered.

Hmm yes that is bad.  Can you look in the total counts of queries that
unbound produces and see where they end up?

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkonx+EACgkQkDLqNwOhpPgoXQCfR4pK4ImWxZSCulRweQFH2SCV
TOIAn0HL0PHnujBK4SfCK/v4UqFR4vpm
=OxAV
-----END PGP SIGNATURE-----