Maintained by: NLnet Labs

[Unbound-users] Can't Bind Socket Error

W.C.A. Wijngaards
Thu Oct 9 09:09:46 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Paul,

On 09/10/14 02:08, Paul Stewart wrote:
> Hi there…
> 
> 
> 
> We just started migrating some of our customer base over to
> Unbound.
> 
> 
> 
> Server is VM instance (VmWare) with 8 Gig RAM, 4 vCPU’s running
> CentOS 7 (64 bit).  Unbound version 1.4.20 via YUM package
> install.

The socket bind this late is for queries to upstream authority
servers, it is trying to bind one of the outgoing-interface IP
addresses.  If you configured it, one of those addresses is not
actually served by your system (or the VM).  Another option is that
IPv6 is broken in the VM and binding the ipv6 fd to ::0 fails.

Best regards,
   Wouter

> We started noticing the following errors in the logs this evening:
> 
> 
> 
> Oct  8 19:48:51 dns2-pppoe unbound: [1110:0] error: can't bind
> *socket*: Permission denied
> 
> Oct  8 19:49:24 dns2-pppoe unbound: [1110:0] error: can't bind
> *socket*: Permission denied
> 
> Oct  8 19:50:46 dns2-pppoe unbound: [1110:0] error: can't bind
> *socket*: Permission denied
> 
> Oct  8 19:56:40 dns2-pppoe unbound: [1110:0] error: can't bind
> *socket*: Permission denied
> 
> Oct  8 19:59:24 dns2-pppoe unbound: [1110:0] error: can't bind
> *socket*: Permission denied
> 
> 
> 
> When looking at stats, the number of lookups and cache hits for
> that specific instance keep incrementing.  Just wondering if anyone
> has any ideas on what is causing these errors?
> 
> 
> 
> Thanks,
> 
> Paul
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________ Unbound-users
> mailing list Unbound-users at unbound.net 
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=cZRI
-----END PGP SIGNATURE-----