Maintained by: NLnet Labs

[Unbound-users] Stuck resolv a.root-servers.net

W.C.A. Wijngaards
Tue May 10 10:16:56 CEST 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Telesis,

On 05/10/2011 07:27 AM, Telesis wrote:
> Hi all.
> Watching just such a problem.
> 
> [rt at rdns-r-S4 ~]# unbound-control dump_requestlist
> thread #0
> #   type cl name    seconds    module status
>   0    A IN a.root-servers.net. 947.061093
> iterator wait for 192.35.51.30

It is trying to resolve the name a.root-servers.net, but that IP address
is for f.gtld-servers.net.

> [rt at rdns-r-S4 ~]# nslookup a.root-servers.net
> ;; connection timed out; no servers could be reached

If you really want to debug this, use dig.
$ dig @192.35.51.30 a.root-servers.net.
works fine for me.

Do you have special configuration for com or net?  Normally unbound
would ask a-m.gtld-servers.net for the answer if f.gtld-servers.net does
not answer immediately.

If all the servers for .net do not respond (once an hour) this explains
your graph with lots of spikes, and you have a more serious (network)
problem.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJNyPR4AAoJEJ9vHC1+BF+Nc00QAKARckPvMxC3og8uLZ2TO6FV
AkDMTEamCHL8I89roxls6OnpB27bDeN5axcl+ELVhmTTjFa65imZjARajb5qARVr
ayBLwxNVpUczCY0QzJTnMJYDpBegMjmyMb8f5MRLCjDiESxng0Kge7I46rLfZo4P
mm3cLO2nDIS40n8slr5ROqgSDf5I1r4eYi4bHQlT01kbnLGY8OVqfKlaU6gFnJzH
dXPJDXf5Fg1689cfHS9LJayBTNcIl/eg+rJdiAmpLB1EFmft92feGkO81jACNA0u
A3wLHctXSBueEUzHwYmbKVb3IMmzfiD20dbM6VBSXyUGudf3ONxYxjPTj5k5TPbj
0nssqYW2nbS/vbt02lafl3JfN7lJ1UiJ+doDb8yEQoXYaJzTb/W0WGdrQzbZfUEm
L0p7Fc0g7AUOnVPC94b0N/iTZQPsQTVRkZXWx9KD5Js3CL6NFCQuhFJciANTK3CU
hbda++mIpaUEj6HN1TyxhsescmqPu1LlHzJaHzrTMaHSSXynG6TxOZAZRn5bEn4O
W194N5WOAwnptJDldphzKqylP5jaoaHpyL9xMBLRoeWyGIhEt4LqGkHlWpqUfHpc
bdKMFYt+3GcatFJg+3jmz9St4RldkTIgHna1u1yAn+WxaJAnhIYQwz8aa9gCoqeG
Sw/osuRr2prDbT3S4rWc
=Vpvj
-----END PGP SIGNATURE-----