[dnsdist] Marking downstream Unexplained

Thu Apr 7 09:14:22 UTC 2016

Following this thread, when I create a rule to forward queries from Amazon servers (200 QPS)to my Abuse Pool makes my abuse server become unstable.

I have enabled maxCheckFailures=5 but the issue persist.

Anyone knows how to deal with this?

Thanks a lot

Apr  7 09:55:56 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:56:03 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:56:09 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:57:04 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:57:08 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:57:09 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:57:11 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:57:14 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:57:16 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:58:01 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:58:06 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:58:07 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:58:09 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:59:00 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:59:04 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:59:05 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:59:07 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:59:08 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:59:10 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 09:59:55 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 09:59:58 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:00:01 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 10:00:07 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:00:16 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 10:00:18 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:00:57 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 10:01:01 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:01:04 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 10:01:07 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:01:54 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'
Apr  7 10:01:57 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'down'
Apr  7 10:01:58 MyRecursor dnsdist[5461]: Marking downstream Abuse Recursor (xxx.xxx.xxx.xxx:53) as 'up'

-----Original Message-----
From: dnsdist [mailto:dnsdist-bounces at mailman.powerdns.com] On Behalf Of Remi Gacogne
Sent: viernes, 19 de febrero de 2016 18:17
To: Aleš Rygl <ales at rygl.net>; dnsdist at mailman.powerdns.com
Subject: Re: [dnsdist] Marking downstream Unexplained

> I have just realized that in verbose mode all queries are logged (I 
> was not aware of that). I am affraid that running dnsdist in verbose 
> mode is not a good idea in production because of the ammount of logs 
> and... without verbose mode setVerboseHealthChecks(true) does not have the effect... what now?

Right, perhaps we should log health check errors if
setVerboseHealthChecks() is set to true, regardless of whether dnsdist is in verbose mode. I'll make that change.

Remi