odd increase in SERVFAIL with "misc failure" reason

[Olivier Benghozi]

Hi Yorgos,

yes, about serve-expired we have:

serve-expired: yes

serve-expired-ttl: 172800

serve-expired-reply-ttl: 300

serve-expired-client-timeout: 1600


ede-serve-expired: yes


I've just downgraded one server in our DNS farm from 1.22.0 to 1.21.1 ; UDP
Out queries value was immediately divided by 2.

Le mer. 6 nov. 2024 à 19:12, Yorgos Thessalonikefs via Unbound-users <
unbound-users at lists.nlnetlabs.nl> a écrit :

> Hi Olivier,
>
> This (more upstream queries) may be related to another issue that we are
> investigating.
> Do you happen to have serve-expired enabled in Unbound?
>
> Best regards,
> -- Yorgos
>
> On 06/11/2024 18:56, Olivier Benghozi via Unbound-users wrote:
> > ... and CPU usage is x1.5.
> > Something seems wrong.
> >
> > Le mer. 6 nov. 2024 à 18:11, Olivier Benghozi
> > <olivier.benghozi at wifirst.fr <mailto:olivier.benghozi at wifirst.fr>> a
> écrit :
> >
> >     Here we observe a big increase of UDP Out queries when updating from
> >     1.21.0 to 1.22.0 (factor x4).
> >     Doesn't seem to be linked to max-global-quota
> >
> >     Le mer. 6 nov. 2024 à 16:33, Yorgos Thessalonikefs via Unbound-users
> >     <unbound-users at lists.nlnetlabs.nl <mailto:unbound-
> >     users at lists.nlnetlabs.nl>> a écrit :
> >
> >         Hi Wolfgang, Otto,
> >
> >         Thanks for bringing this up!
> >         We also had other operational feedback about the value and we
> >         decided to
> >         bump it up to 200 from the initial 128.
> >         Still keeping the possible amplification factor for CAMP-style
> >         issues in
> >         the hundreds.
> >
> >         https://github.com/NLnetLabs/unbound/commit/
> >         fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216 <https://github.com/
> >
>  NLnetLabs/unbound/commit/fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216>
>
>

-- 
*Ce message et toutes les pièces jointes (ci-après le "message") sont 
établis à l’intention exclusive des destinataires désignés. Il contient des 
informations confidentielles et pouvant être protégé par le secret 
professionnel. Si vous recevez ce message par erreur, merci d'en avertir 
immédiatement l'expéditeur et de détruire le message. Toute utilisation de 
ce message non conforme à sa destination, toute diffusion ou toute 
publication, totale ou partielle, est interdite, sauf autorisation expresse 
de l'émetteur*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20241106/88148c99/attachment.htm>