Maintained by: NLnet Labs

[Unbound-users] negative cachetime

A. Schulze
Tue Mar 10 08:04:31 CET 2015


we run in an issue with cached negative answers and need clarification.

at t=0 a client ask unbound for
unbound does not know anything about the domain and ask the nameserver
the answer is NXDOMAIN.

at t=1, some seconds later, the nameserver is reconfigured and now exist.

at t=3 the same or an other client ask unbound again for
the answer is still NXDOMAIN. t=3 is more then 14 hours later.

How long I have to wait until unbound forget the NXDOMAIN
and fetch new data from authoritative server? Could that be controlled  

The SOA-Reord for looks like this: 12967 IN SOA  
1501261358 43200 7200 2419200 86400

There was a similar question a year ago about min and max negative ttl  
without results.