NSD CPU time consumption in slave config

[Andrew Sullivan]

On Fri, Jul 06, 2007 at 08:04:53PM +0200, Jan Boysen - servage.net wrote:
> The first hour or so the slave answers with servfail which is annoying
> too I think.. would it not be better if it were refusing the connection
> instead ?

When I looked at it (perhaps the developers will correct me if I'm
wrong), I concluded that it worked this way because of the way nsd
drops privilege after binding to the low-numbered port.  It seemed to
me that because it wanted to drop privs as soon as possible, it had to
adopt some strategy of handling the requests, so SERVFAIL was the
answer.  I agree it's sort of ugly, though.

A

-- 
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew at ca.afilias.info>                              M2P 2A8
jabber: ajsaf at jabber.org                 +1 416 646 3304 x4110