<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto"><span style="font-family:Helvetica Neue">This looks like it might indeed be it! I'll apply it to our internal 1.8.0 packages and give it a shot. Thanks!</span></div>
</div>
<div name="messageSignatureSection"><br />
<div class="matchFont">-Dustin</div>
</div>
<div name="messageReplySection">On Jul 15, 2023 at 2:42 AM -0500, Otto Moerbeek <otto@drijf.net>, wrote:<br />
<blockquote type="cite" style="border-left-color: grey; border-left-width: thin; border-left-style: solid; margin: 5px 5px;padding-left: 10px;">On Fri, Jul 14, 2023 at 03:06:12PM -0500, Dustin Marquess via dnsdist wrote:<br />
<br />
<blockquote type="cite">So far we've had instances with dnsdist 1.8.0 having a thread in a tight loop. OS versions seem to vary widely, so I don't believe it's a glibc bug.<br />
<br />
Config on both is the same plain config:<br />
<br />
setLocal("127.0.0.1:53", {reusePort=true})<br />
addLocal("127.0.0.1:53", {reusePort=true})<br />
addLocal("127.0.0.1:53", {reusePort=true})<br />
addLocal("127.0.0.1:53", {reusePort=true})<br />
addACL('10.0.0.0/8')<br />
newServer({address="10.112.104.116", checkType="A", checkClass=DNSClass.IN, checkName="hc.xxx.local", mustResolve=true, checkInterval=30})<br />
newServer({address="10.112.106.177", checkType="A", checkClass=DNSClass.IN, checkName="hc.xxx.local", mustResolve=true, checkInterval=30})<br />
newServer({address="10.9.41.68", checkType="A", checkClass=DNSClass.IN, checkName="hc.xxx.local", mustResolve=true, checkInterval=30})<br />
setServerPolicy(firstAvailable)<br />
<br />
-- Tuning<br />
setRingBuffersSize(1000000, 100)<br />
setMaxTCPClientThreads(20)<br />
<br />
-- Caching<br />
-- We should make these tunables configurable<br />
pc = newPacketCache(100000, {maxTTL=86400, minTTL=0, temporaryFailureTTL=60, staleTTL=60, dontAge=false})<br />
getPool(""):setCache(pc)<br />
<br />
-- Don't try and hit the internet<br />
setSecurityPollSuffix("")<br />
<br />
[pid 2990] recvfrom(-1, 0x7f3d9c0008c0, 4368, 0, NULL, NULL) = -1 EBADF (Bad file descriptor)<br />
[pid 2990] recvfrom(-1, 0x7f3d9c0008c0, 4368, 0, NULL, NULL) = -1 EBADF (Bad file descriptor)<br />
[pid 2990] recvfrom(-1, 0x7f3d9c0008c0, 4368, 0, NULL, NULL) = -1 EBADF (Bad file descriptor)<br />
[pid 2990] recvfrom(-1, 0x7f3d9c0008c0, 4368, 0, NULL, NULL) = -1 EBADF (Bad file descriptor)<br />
<br />
In each case, a strace shows a bad recvfrom() call in a tight loop:<br />
<br />
Obviously -1 is a bad fd! Restarting dnsdist seems to resolve it. The only idea I can come up with is that when dnsdist first starts, it's unable to contact the upstream DNS servers and that somehow causes the issue. When we restart it, it IS able to contact them, and so works fine.<br />
<br />
Any ideas?<br />
<br />
Thanks!<br />
-Dustin<br /></blockquote>
<br />
This is likely https://github.com/PowerDNS/pdns/pull/12726<br />
<br />
ATM this is not marked for backporting to 1.8.x. Don't know if that is<br />
an omission.<br />
<br />
-Otto<br /></blockquote>
</div>
</body>
</html>