<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>> but an unsatisfied client will still query again.<br><br>Yes, but the Recursor will answer this client retries with SERVFAIL for <packetcache-servfail-ttl> seconds without asking the Auth again. And it will not ask an unresponsive Auth for <server-down-throttle-time> seconds.<br><br>Winfried<br><br><br><div class="gmail_quote">Am 21. September 2020 15:14:49 MESZ schrieb Mira Krejci via Pdns-users <pdns-users@mailman.powerdns.com>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Thanks Winfried and Brian for the anwers. This appears to be a PDNS
recursor property that cannot be configured by configuration. <br>
I understand that repeated query is another burden for an overloaded
authoritative server, but an unsatisfied client will still query
again.<br>
<br>
Mira<br>
<br>
<div class="moz-cite-prefix">Dne 18. 09. 20 v 17:42 Winfried Angele
napsal(a):<br>
</div>
<blockquote type="cite"
cite="mid:20200918154238.8850F191DD74@smtp.interactive-1.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Hi Mira,<br>
<br>
I think if a Resolver retries on possibly overloaded or attacked
authoritative DNS servers, it gets even worse for them. So I'd
recommend to try to contact the people in charge for that domain
and try to convince them to solve the problem on their side. And
again, the Recursor tries on each Nameservers address listed in
the NS RRset. So it does retries, but not on the same address.
That means, in your case, all DNS servers of that domain are
overloaded or broken or attacked.<br>
<br>
Winfried<br>
<br>
<br>
<div class="gmail_quote">Am 18. September 2020 16:05:04 MESZ
schrieb Mira Krejci <a class="moz-txt-link-rfc2396E" href="mailto:krejci@i3.cz"><krejci@i3.cz></a>:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;"> <br>
Hi Winfried,<br>
<br>
thank you for your reply.<br>
If it's a feature and can't be changed, I have a big problem
that I'll have to solve by changing the software to another.<br>
For example, Bind asks more than once if answer does not come.
Users are angry that DNS resolving does not work for them (of
course, it is to blame for authoritative servers of a specific
domain). <br>
But I have to solve it somehow.<br>
<br>
Thanks.<br>
Mira<br>
<br>
<div class="moz-cite-prefix">Dne 18. 09. 20 v 15:34 Winfried
Angele napsal(a):<br>
</div>
<blockquote type="cite"
cite="mid:20200918133456.F37F1191D211@smtp.interactive-1.com">
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
Hi Mira,<br>
<br>
Yes the Recursor does no retry on *this* auth. But it tries
on the other nameservers from the NS RR set. IPv4 and IPv6.
So if you have only one auth, Recursor tries two times, IPv4
and IPv6 if available.<br>
<br>
Winfried<br>
<br>
<br>
<br>
<div class="gmail_quote">Am 18. September 2020 14:47:49 MESZ
schrieb Mira Krejci via Pdns-users <a
class="moz-txt-link-rfc2396E"
href="mailto:pdns-users@mailman.powerdns.com"
moz-do-not-send="true"><pdns-users@mailman.powerdns.com></a>:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
<pre class="k9mail">Hi,
I have a problem that I can't force the pdns recursor to query the
authoritative servers repeatedly if they do not answer. Recursor tries
the query only once and then return an error (SERVFAIL) to the client.
This is very problematic when the authoritative server is overloaded or
there are some problems on the network. I didn't find any way in the
configuration to change it.
Server version: 4.2.2-1 (from EPEL repo on CentOS 8)
Can anyone help?
Thanks.
Mira<hr>Pdns-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pdns-users@mailman.powerdns.com" moz-do-not-send="true">Pdns-users@mailman.powerdns.com</a>
<a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" moz-do-not-send="true">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a>
</pre>
</blockquote>
</div>
</blockquote>
<br>
</blockquote>
</div>
</blockquote>
<br>
</blockquote></div></body>
</html>