[Unbound-users] Strange SERVFAIL from unbound

[Florian Weimer]

* Wouter Wijngaards:

> So, do I understand correctly, that you only did +norec queries (any
> query without +norec updated the cache so could invalidate further
> results), and that you only got replies for most of the nameservers with
>  +norec +cdflag +dnssec ?

+dnssec implies +bufsize=4096, so it's likely that it's just a side
effect.

> The reason that things are going wrong is the TTL for A records much
> lower than AAAA records.  This is also exactly what I fixed for.  I do
> not really understand this massive difference in A and AAAA time values.

Uhm, why should they expire at the same time from an LRU cache?