<div dir="ltr"><div>Hi Yorgos,</div><div><br></div><div>yes, about serve-expired we have:</div><div><br></div><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">serve-expired: yes</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">serve-expired-ttl: 172800</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">serve-expired-reply-ttl: 300</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">serve-expired-client-timeout: 1600</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>ede-serve-expired: yes</span></p></div><div><br></div><div><br></div>I've just downgraded one server in our DNS farm from 1.22.0 to 1.21.1 ; UDP Out queries value was immediately divided by 2.<div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mer. 6 nov. 2024 à 19:12, Yorgos Thessalonikefs via Unbound-users <<a href="mailto:unbound-users@lists.nlnetlabs.nl">unbound-users@lists.nlnetlabs.nl</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Olivier,<br>
<br>
This (more upstream queries) may be related to another issue that we are <br>
investigating.<br>
Do you happen to have serve-expired enabled in Unbound?<br>
<br>
Best regards,<br>
-- Yorgos<br>
<br>
On 06/11/2024 18:56, Olivier Benghozi via Unbound-users wrote:<br>
> ... and CPU usage is x1.5.<br>
> Something seems wrong.<br>
> <br>
> Le mer. 6 nov. 2024 à 18:11, Olivier Benghozi <br>
> <<a href="mailto:olivier.benghozi@wifirst.fr" target="_blank">olivier.benghozi@wifirst.fr</a> <mailto:<a href="mailto:olivier.benghozi@wifirst.fr" target="_blank">olivier.benghozi@wifirst.fr</a>>> a écrit :<br>
> <br>
> Here we observe a big increase of UDP Out queries when updating from<br>
> 1.21.0 to 1.22.0 (factor x4).<br>
> Doesn't seem to be linked to max-global-quota<br>
> <br>
> Le mer. 6 nov. 2024 à 16:33, Yorgos Thessalonikefs via Unbound-users<br>
> <<a href="mailto:unbound-users@lists.nlnetlabs.nl" target="_blank">unbound-users@lists.nlnetlabs.nl</a> <mailto:<a href="mailto:unbound-" target="_blank">unbound-</a><br>
> <a href="mailto:users@lists.nlnetlabs.nl" target="_blank">users@lists.nlnetlabs.nl</a>>> a écrit :<br>
> <br>
> Hi Wolfgang, Otto,<br>
> <br>
> Thanks for bringing this up!<br>
> We also had other operational feedback about the value and we<br>
> decided to<br>
> bump it up to 200 from the initial 128.<br>
> Still keeping the possible amplification factor for CAMP-style<br>
> issues in<br>
> the hundreds.<br>
> <br>
> <a href="https://github.com/NLnetLabs/unbound/commit/" rel="noreferrer" target="_blank">https://github.com/NLnetLabs/unbound/commit/</a><br>
> fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216 <<a href="https://github.com/" rel="noreferrer" target="_blank">https://github.com/</a><br>
> NLnetLabs/unbound/commit/fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216><br><br>
</blockquote></div></div></div>
<br>
<div><i>Ce message et toutes les pièces jointes (ci-après le "message") sont établis à l’intention exclusive des destinataires désignés. Il contient des informations confidentielles et pouvant être protégé par le secret professionnel. Si vous recevez ce message par erreur, merci d'en avertir immédiatement l'expéditeur et de détruire le message. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse de l'émetteur</i></div>