<div dir="ltr"><div>Hi Remi,</div><div><br></div><div>Thanks for your reply. </div><div>I assume this mechanism is a feature that powerdns has, to protect server resources. But, is there a way to reconfigure this throttling mechanism ? I have tried to decrease server-down-throttle-time by hoping that once the authoritative answered my query, powerdns will keep the record in its cache. </div><div>Because, if i try to use other dns recursor software, they can resolve this domain.</div><div><br></div><div>Regards,</div><div class="gmail_extra"><br><div class="gmail_quote"><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Tue, 14 Aug 2018 11:57:08 +0200<br>
From: Remi Gacogne <<a href="mailto:remi.gacogne@powerdns.com">remi.gacogne@powerdns.com</a>><br>
To: <a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.<wbr>com</a><br>
Subject: Re: [Pdns-users] Query throttled message in pdns_recursor<br>
trace log<br>
Message-ID: <<a href="mailto:7203fdb9-a156-f081-a55d-f71a097e6ee2@powerdns.com">7203fdb9-a156-f081-a55d-<wbr>f71a097e6ee2@powerdns.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi,<br>
<br>
On 8/14/18 11:44 AM, haries fajar nugroho wrote:<br>
> I've got some weird result when query some domains, for<br>
> example <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a> . I got<br>
> servfail but if i query without www appended, i can get the result.<br>
<br>
The servers for this domain are utterly broken, sending REFUSED for<br>
valid queries: <a href="http://dnsviz.net/d/www.coachingindonesia.com/dnssec/" rel="noreferrer" target="_blank">http://dnsviz.net/d/www.<wbr>coachingindonesia.com/dnssec/</a><br>
<br>
This is the reason why we are throttling it for a while, because we<br>
don't want to waste our time sending queries to broken servers.<br>
<br>
> Below is what i got from my pdns recursor (4.1.3) on Ubuntu 17.10 that<br>
> installed with apt-get.<br>
> <br>
> <a href="http://www.coachingindonesia.com" rel="noreferrer" target="_blank">www.coachingindonesia.com</a><br>
> ------------------------------<wbr>---<br>
> ; <<>> DiG 9.8.1-P1 <<>> <a href="http://www.coachingindonesia.com" rel="noreferrer" target="_blank">www.coachingindonesia.com</a> @<a href="http://192.168.77.215" rel="noreferrer" target="_blank">192.168.77.215</a><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1660<br>
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0<br>
> <br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://www.coachingindonesia.com" rel="noreferrer" target="_blank">www.coachingindonesia.com</a>. IN <br>
> A<br>
> <br>
> ;; ANSWER SECTION:<br>
> <a href="http://www.coachingindonesia.com" rel="noreferrer" target="_blank">www.coachingindonesia.com</a>. 6021 IN <br>
> CNAME <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a>.<br>
> <br>
> <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a><br>
> ------------------------------<wbr>-<br>
> ;; Query time: 3 msec<br>
> ;; SERVER: 192.168.77.215#53(192.168.77.<wbr>215)<br>
> ;; WHEN: Tue Aug 14 14:23:44 2018<br>
> ;; MSG SIZE rcvd: 57<br>
> <br>
> ; <<>> DiG 9.8.1-P1 <<>> <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a> @<a href="http://192.168.77.215" rel="noreferrer" target="_blank">192.168.77.215</a><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60544<br>
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0<br>
> <br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a>. IN A<br>
> <br>
> ;; ANSWER SECTION:<br>
> <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a>. 5979 IN <br>
> A 107.180.76.89<br>
> <br>
> ;; Query time: 212 msec<br>
> ;; SERVER: 192.168.77.215#53(192.168.77.<wbr>215)<br>
> ;; WHEN: Tue Aug 14 14:24:26 2018<br>
> ;; MSG SIZE rcvd: 55<br>
> <br>
> I found that domains that failed to resolved had "query throttled"<br>
> message, like : [2] <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesia.com</a>: query throttled<br>
> 216.69.185.1, <a href="http://coachingindonesia.com" rel="noreferrer" target="_blank">coachingindonesi<wbr>a.com</a>; A.<br>
> I don't know what i have to do, because i can query that domain if i use<br>
> another dns recursor software in the same machine and IP<br>
> <br>
> I also attached the trace log query for that domain. <br>
<br>
<br>
Best regards,<br>
-- <br>
Remi Gacogne<br>
PowerDNS.COM BV - <a href="https://www.powerdns.com/" rel="noreferrer" target="_blank">https://www.powerdns.com/</a><br>
<br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: signature.asc<br>
Type: application/pgp-signature<br>
Size: 488 bytes<br>
Desc: OpenPGP digital signature<br>
URL: <<a href="http://mailman.powerdns.com/pipermail/pdns-users/attachments/20180814/af8ac492/attachment-0001.sig" rel="noreferrer" target="_blank">http://mailman.powerdns.com/<wbr>pipermail/pdns-users/<wbr>attachments/20180814/af8ac492/<wbr>attachment-0001.sig</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
______________________________<wbr>_________________<br>
Pdns-users mailing list<br>
<a href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.<wbr>com</a><br>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/<wbr>mailman/listinfo/pdns-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Pdns-users Digest, Vol 187, Issue 12<br>
******************************<wbr>*************<br>
</blockquote></div><br></div></div>