unbound refuses all requests

George Thessalonikefs george at nlnetlabs.nl
Fri Nov 12 16:32:02 UTC 2021


Hi Johannes,

The module-config option should be part of the "server:" section.

Best regards,
-- George

On 12/11/2021 17:29, Johannes B. Kernel via Unbound-users wrote:
> Sorry the confusion.... the 'module-config' was commented out....
> Uncommented unbound dont starts with that config
> but it was my understanding of the link above with the unbound.conf on git
> 
> best regards
> marko
> 
> Am Fr., 12. Nov. 2021 um 10:45 Uhr schrieb George Thessalonikefs via 
> Unbound-users <unbound-users at lists.nlnetlabs.nl 
> <mailto:unbound-users at lists.nlnetlabs.nl>>:
> 
>     Hi Johannes,
> 
>     I see a lot of configuration errors WRT redis in your unbound.conf.
>     Instead of me going over everything I would suggest to read the "Cache
>     DB Module Options" section in the unbound.conf man page (Also online
>     for
>     the latest version:
>     https://www.nlnetlabs.nl/documentation/unbound/unbound.conf/
>     <https://www.nlnetlabs.nl/documentation/unbound/unbound.conf/>) as I
>     believe it covers all the steps and configuration you need to make.
> 
>     If you still have questions feel free to ask them here again.
> 
>     Best regards,
>     -- George
> 
>     On 11/11/2021 17:42, Johannes B. Kernel via Unbound-users wrote:
>      > @hauke , damn  ps aux showed me 2 running daemons.....
>      > and i found out, i "missed" to copy over the access.conf in
>      > unbound.conf.d/  :-)
>      >
>      > now nearlyall is running fine..
>      > only redis seems not to cache.....
>      >
>      > my unbound.conf.
>      >
>      > server:
>      >
>      > statistics-cumulative: yes
>      > extended-statistics: yes
>      > log-queries: yes
>      > log-servfail: yes
>      > verbosity: 3
>      > val-log-level: 2
>      > auto-trust-anchor-file: /etc/unbound/var/root-anchors.txt
>      >
>      > interface: 127.0.0.1
>      > interface: 192.168.100.250
>      > interface: 192.168.120.251
>      > interface: 192.168.110.250
>      >
>      > outgoing-interface: 192.168.100.250
>      > outgoing-interface: 192.168.110.250
>      > outgoing-interface: 192.168.120.251
>      > outgoing-interface: 116.202.87.165
>      >
>      > num-threads: 8
>      >
>      > include: /etc/unbound/unbound.conf.d/access_options.conf
>      > include: /etc/unbound/unbound.conf.d/name_solving.conf
>      > include: /etc/unbound/unbound.conf.d/privacy_options.conf
>      > include: /etc/unbound/unbound.conf.d/cache_options.conf
>      > include: /etc/unbound/unbound.conf.d/dnssec_options.conf
>      > include: /etc/unbound/unbound.conf.d/blacklist.conf
>      > include: /etc/unbound/unbound.conf.d/local_names.conf
>      > include: /etc/unbound/unbound.conf.d/opennic_names.conf
>      > include: /etc/unbound/unbound.conf.d/forwarders.conf
>      >
>      > remote-control:
>      >        control-enable: yes
>      >
>      > cachedb:
>      >    backend: "testframe"
>      >    secret-seed: "default"
>      >    redis-server-host: 127.0.0.1
>      >    redis-server-port: 6379
>      >    redis-timeout: 100
>      >    redis-expire-records: no
>      >
>      >
>      >
>      > when i connect my redis server via "redis-cli" .....
>      >
>      > supabunka/etc/unbound #redis-cli
>      > 127.0.0.1:6379 <http://127.0.0.1:6379> <http://127.0.0.1:6379
>     <http://127.0.0.1:6379>>> keys *
>      > (empty array)
>      > 127.0.0.1:6379 <http://127.0.0.1:6379> <http://127.0.0.1:6379
>     <http://127.0.0.1:6379>>>
>      >
>      >
>      > seems nothing get cached......
>      >
>      > any idea?
>      >
>      >
>      > Am Mi., 10. Nov. 2021 um 18:29 Uhr schrieb Hauke Lampe via
>     Unbound-users
>      > <unbound-users at lists.nlnetlabs.nl
>     <mailto:unbound-users at lists.nlnetlabs.nl>
>      > <mailto:unbound-users at lists.nlnetlabs.nl
>     <mailto:unbound-users at lists.nlnetlabs.nl>>>:
>      >
>      >
>      >     On 10.11.21 17:50, Johannes B. Kernel via Unbound-users wrote:
>      >
>      >      > and now it works, for 3-5 requests, the all gets refused
>     for 2-5
>      >     time, then
>      >      > again it works .............
>      >      >
>      >      > Nov 10 17:45:40 supabunka unbound: [25308:1] debug:
>     refused query
>      >     from ip4
>      >      > Nov 10 17:45:43 supabunka unbound: [15016:0] info:
>      >     192.168.100.250 heise.de <http://heise.de> <http://heise.de
>     <http://heise.de>>.
>      >
>      >     The refusals come from PID 25308 while PID 15016 processes
>     the requests.
>      >
>      >     Do you have multiple daemons with different configurations
>     and/or a DNS
>      >     balancer?
>      >
>      >
>      >     Hauke.
>      >
> 


More information about the Unbound-users mailing list