[nsd-users] NSD4 goes unresponsive with lots of TCP connection!

[Kabindra Shrestha]

Hi,

> On Apr 7, 2016, at 2:23 PM, Peter Andreev <andreev.peter at gmail.com> wrote:
> 
> Hi,
> 
> We have seen the behaviour described in first message on two of our nodes:
> NSD 4.0.1 and 4.0.3 went completely unresponsive when sockstat showed
> few thousand TCP connections. Both nodes operate under FreeBSD 10.0.
> 
> Recently I updated NSD to 4.1.9 and now am waiting if problem appear again.

Was the RRL ratelimit too strict on the earlier version. The increment on the number of TCP connections on our end is mostly due to the strict ratelimit. But still NSD daemon going unresponsive for both UDP and TCP on TCP load is quite problematic.

Thanks

> 
> 2016-04-06 14:56 GMT+03:00 Daisuke HIGASHI <daisuke.higashi at gmail.com>:
>> Hi,
>> 
>>  I have seen opposite (same?) situation with BIND9 nameserver -- many
>> UDP queries and
>> almost unresponsible both for UDP and TCP query.
>> That was not due to BIND9's issue, but firewall (iptables) state table was full.
>> _______________________________________________
>> nsd-users mailing list
>> nsd-users at NLnetLabs.nl
>> https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
> 
> 
> 
> --
> Is there any problem Exterminatus cannot solve? I have not found one yet.

Regards,
Kabindra Shrestha

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20160408/67eceec1/attachment.bin>