[Unbound-users] forward servers: option to log failed requests

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Felix,

On 08/31/2009 10:22 AM, Felix Schueren wrote:
> we're still tracking a "some miniscule amount of queries fail every
> couple of days" case with unbound, and we think it might be related to
> unbounds backoff timer. Dumping unbound-control lookup (forwarded-zone)
> every minute yielded this:

These servers are both for the same zone, right?
So if server 1 does not work, unbound tries server 2.
In the sample below, it would start out favoring server 2,
which is working fine it says.

Are there statistics from the kernel, network stack, about
packets and dropped packets?  Is the answer getting dropped
somewhere else in your network?

> normally looks like
> (forward server 1)          rtt 27 msec, 0 lost. EDNS 0 probed.
> (forward server 2)          rtt 23 msec, 0 lost. EDNS 0 probed.
> 
> 
> problem timeframe:
> 
> Mon Aug 31 00:47:09 CEST 2009
> (forward server 1)          rtt 800 msec, 1 lost. EDNS 0 probed.
> (forward server 2)          rtt 31 msec, 0 lost. EDNS 0 probed.

> and we had a couple of dns-related error messages ("unable to resolve")
> for queries that I know go to the forward servers at 00:50:03 +0200 that
> day.
> 
> As the volume is too large to dump properly, I would like an option per
> forward server or per forward zone to dump failed requests with the full
> query. These forward servers should _always_ answer, each failed query
> should be logged in a configurable verbosity level (so we could set it
> to 1 - 2 is pretty much unusable due to the high volume). Even if you
> would not want it in mainline, maybe a debug build would be possible?
> 
> 
> Thoughts?
> 
> Kind regards,
> 
> Felix
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkqbkH4ACgkQkDLqNwOhpPj7fQCfWa4xEk8Oiu7M36ooaCfEeuXd
QNcAoIR3oBvDX1aRAF1YdpyVYsJ2bfMt
=Eh4A
-----END PGP SIGNATURE-----