<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16705" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008>Hello!</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=203322213-08102008>I'm looking at using
unbound as a replacement for Bind9 for our datacenters caching nameservers. Bind
is overly bloated and complex for something as simple as providing a DNS
resolver for our customers. So far unbound seems streamlined and fast, I like
it. </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=203322213-08102008>Earlier this
morning, I actually implemented unbound on one of our lesser used caching
nameservers in order to try it out under some actual load. I came across a
problem and hopefully you all can give me a hand with it. Here is a snippit of
the some applicable logs.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=203322213-08102008>[1223447403]
unbound[4318:0] info: validator operate: query <fox.com. A
IN><BR>[1223447403] unbound[4318:0] info: resolving <fox.com. A
IN><BR>[1223447403] unbound[4318:0] info: resolving (init part 2):
<fox.com. A IN><BR>[1223447403] unbound[4318:0] info: resolving (init part
3): <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
processQueryTargets: <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
sending query: <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
345RDd mod1 rep <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
345RDd mod1 rep <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
345RDd mod1 rep <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
345RDd mod1 rep <fox.com. A IN><BR>[1223447403] unbound[4318:0] info:
345RDd mod1 rep <fox.com. A IN><BR>...insert 100's of repeats of this log
entry</SPAN></FONT><FONT face=Arial size=2><SPAN
class=203322213-08102008>...</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=203322213-08102008>[1223447441]
unbound[4318:0] info: 339RDdc mod1 rep <fox.com. A IN><BR>[1223447441]
unbound[4318:0] info: 339RDdc mod1 rep <fox.com. A IN><BR>[1223447441]
unbound[4318:0] info: 339RDdc mod1 rep <fox.com. A IN><BR>[1223447441]
unbound[4318:0] info: 339RDdc mod1 rep <fox.com. A IN><BR>[1223447441]
unbound[4318:0] info: 339RDdc mod1 rep <fox.com. A IN><BR>[1223447441]
unbound[4318:0] info: iterator operate: query <fox.com. A
IN><BR>[1223447441] unbound[4318:0] info: scrub for <fox.com. NS
IN><BR>[1223447441] unbound[4318:0] info: response for <fox.com. A
IN><BR>[1223447441] unbound[4318:0] info: reply from <fox.com.>
212.187.244.39#53<BR>;;
fox.com. IN A<BR>fox.com. 600 IN A 69.10.20.100<BR>[1223447441]
unbound[4318:0] info: finishing processing for <fox.com. A
IN><BR>[1223447441] unbound[4318:0] info: validator operate: query
<fox.com. A IN><BR></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=203322213-08102008>After 4-5 queries
and timeouts with nslookup/dig I eventually get the response shown above. Any
ideas? Something wrong with my config?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008>Thanks!</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008>Config:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=203322213-08102008>cache-ns6:/usr/local/etc/unbound# cat
unbound.conf </SPAN></FONT><FONT face=Arial size=2><SPAN
class=203322213-08102008><BR>
server:<BR> directory: "/usr/local/etc/unbound" <BR> username:
unbound <BR> chroot: "/usr/local/etc/unbound"<BR> logfile:
"/usr/local/etc/unbound/unbound.log"<BR> pidfile:
"/usr/local/etc/unbound/unbound.pid"<BR> interface:
0.0.0.0<BR> access-control: 0.0.0.0/0 allow<BR> root-hints:
"/usr/local/etc/unbound/named.cache"<BR> do-ip6:
no<BR> outgoing-num-tcp: 100<BR> incoming-num-tcp:
100<BR> msg-cache-size: 1500m<BR> msg-cache-slabs:
8<BR> statistics-interval: 30<BR></SPAN></FONT><FONT face=Arial
size=2><SPAN class=203322213-08102008></DIV></SPAN></FONT></BODY></HTML>