Maintained by: NLnet Labs

[Unbound-users] unbound crashing on FreeBSD

W.C.A. Wijngaards
Thu Jan 30 15:42:38 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mathieu,

On 01/30/2014 03:25 PM, Mathieu Arnold wrote:
> Hi,
> 
> I've upgraded one of my resolvers to FreeBSD 10.0, and since then,
> unbound (1.4.21) crashes regularly (about once a day) with, say :
> 
> Jan 30 12:49:45 resolver3 unbound: [96044:2] fatal error:
> event_dispatch returned error -1, errno is Capabilities
> insufficient
> 
> Any hints on what may be wrong ?

FreeBSD 10.  Does that have a fine-grained user capabilities thing?
event_dispatch would run kqueue for unbound (if you compiled with
libevent).  Does it not have permission to use kqueue?

Without an event loop there is very little that unbound can do; no
events means no information about network sockets.

If you compile --without-libevent, then unbound uses select() which
may avoid this.

Perhaps this is about the number of sockets opened?  The
filedescriptor count in the ulimit structure?   You configured unbound
for high performance with many open sockets, but when it does (when it
gets busy once a day) the OS gives this error?  Strange because
unbound checks the rlimits (resource limits) when it starts.  Does it
run out of memory, i.e. about once a day the cache fills up and
something set the ulimit on heap-size or something like to, say, 1G
but you configured unbound to use 2G, and when it crosses the 1G line
it gets killed (but weird that kqueue gives an error).

What version of libevent are you using?

Best regards,
   Wouter

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=drTU
-----END PGP SIGNATURE-----