<div dir="ltr"><div dir="ltr">... we've downgraded everything to 1.21.1, CPU and UDP Out Queries are back to normal.<div>Definitely 1.22.0 has a problem.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mer. 6 nov. 2024 à 19:42, Olivier Benghozi <<a href="mailto:olivier.benghozi@wifirst.fr">olivier.benghozi@wifirst.fr</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi Yorgos,</div><div><br></div><div>yes, about serve-expired we have:</div><div><br></div><div>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">serve-expired: yes</span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">serve-expired-ttl: 172800</span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">serve-expired-reply-ttl: 300</span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">serve-expired-client-timeout: 1600</span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures"><br></span></p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures"><span> </span>ede-serve-expired: yes</span></p></div><div><br></div><div><br></div>I've just downgraded one server in our DNS farm from 1.22.0 to 1.21.1 ; UDP Out queries value was immediately divided by 2.<div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mer. 6 nov. 2024 à 19:12, Yorgos Thessalonikefs via Unbound-users <<a href="mailto:unbound-users@lists.nlnetlabs.nl" target="_blank">unbound-users@lists.nlnetlabs.nl</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Olivier,<br>
<br>
This (more upstream queries) may be related to another issue that we are <br>
investigating.<br>
Do you happen to have serve-expired enabled in Unbound?<br><br>
<br>
On 06/11/2024 18:56, Olivier Benghozi via Unbound-users wrote:<br>
> ... and CPU usage is x1.5.<br>
> Something seems wrong.<br>
> <br>
> Le mer. 6 nov. 2024 à 18:11, Olivier Benghozi <br>
> <<a href="mailto:olivier.benghozi@wifirst.fr" target="_blank">olivier.benghozi@wifirst.fr</a> <mailto:<a href="mailto:olivier.benghozi@wifirst.fr" target="_blank">olivier.benghozi@wifirst.fr</a>>> a écrit :<br>
> <br>
> Here we observe a big increase of UDP Out queries when updating from<br>
> 1.21.0 to 1.22.0 (factor x4).<br>
> Doesn't seem to be linked to max-global-quota<br>
</blockquote></div></div></div>
</blockquote></div></div>
<br>
<div><i>Ce message et toutes les pièces jointes (ci-après le "message") sont établis à l’intention exclusive des destinataires désignés. Il contient des informations confidentielles et pouvant être protégé par le secret professionnel. Si vous recevez ce message par erreur, merci d'en avertir immédiatement l'expéditeur et de détruire le message. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse de l'émetteur</i></div>