[dnsdist] greqp - how to read?
Bit World Computing - Michael Mertel
michael.mertel at bwc.de
Thu Jul 14 09:00:45 UTC 2016
Hi Bert,
thanks for looking into this.
> Am 14.07.2016 um 10:39 schrieb bert hubert <bert.hubert at powerdns.com>:
>
> On Thu, Jul 14, 2016 at 10:36:57AM +0200, Bit World Computing - Michael Mertel wrote:
>> Hi,
>>
>> a vendor is complaining about our dnsdist powered resolver. For that reason I tried to figure out if there are any resolving issues.
>>
>> If I grep for the query in question I’am getting this (shortened) output. Does ist mean it only got once forwarded to 8.8.4.4 and what about the other queries? How can I tell if the query got answered or not? Does ist get answered from the cache and how can I tell?
>>
>>
>> -42.1 192.168.44.3:59399 21448 kas-av-updates.mailfrontier.net. A RD Question
>
> If you see only this, I think it did not get forwarded.
>
greqp returns thousands of lines like this, and every once in a while the line with the answers from 8.8.8.8 or 8.8.4.4.
> Can you share your dnsdist.conf?
>
controlSocket("0.0.0.0")
setKey(„nothingforthepublic")
webserver('192.168.44.49:8053', ‚webpwd', ‚apipwd')
setLocal("192.168.44.49:53")
setACL("192.168.44.0/24")
truncateTC(true)
pc = newPacketCache(10000, 86400, 0, 60, 60)
getPool(""):setCache(pc)
addPoolRule({„company-dom01.local."}, "internal")
addPoolRule({„company.de."}, "internal")
newServer("8.8.8.8")
newServer("8.8.4.4")
newServer({address="10.5.64.61", pool="internal“})
> Have you checked the built-in webserver? It might give you hints.
>
8.8.4.4 did had 8 drops, the 8.8.8.8 had none.
> Can you show dumpStats()?
>
> dumpStats()
acl-drops 0 latency0-1 45246
block-filter 0 latency1-10 19
cache-hits 45244 latency10-50 3448
cache-misses 4084 latency100-1000 277
cpu-sys-msec 32576 latency50-100 321
cpu-user-msec 53264 no-policy 4
downstream-send-errors 0 noncompliant-queries 0
downstream-timeouts 8 noncompliant-responses 0
dyn-block-nmg-size 0 queries 49349
dyn-blocked 0 rdqueries 49349
empty-queries 0 real-memory-usage 16490496
fd-usage 16 responses 4093
latency-avg100 5115.7 rule-drop 0
latency-avg1000 4865.1 rule-nxdomain 0
latency-avg10000 5421.1 self-answered 0
latency-avg1000000 210.5 servfail-responses 4
latency-slow 26 trunc-failures 0
uptime 90925
> Thanks!
>
> Note that 8.8.4.4 might be rate limiting you, it does that..
>
> Bert
>
>> -41.5 192.168.44.3:40450 45885 kas-av-updates.mailfrontier.net. A RD Question
>> -41.0 192.168.44.3:35357 28157 kas-av-updates.mailfrontier.net. A RD Question
>> -40.2 192.168.44.3:37069 56087 kas-av-updates.mailfrontier.net. A RD Question
>> -39.7 192.168.44.3:46550 18199 kas-av-updates.mailfrontier.net. A RD Question
>> -38.9 192.168.44.3:43979 28665 kas-av-updates.mailfrontier.net. A RD Question
>> -38.0 192.168.44.3:40127 49118 kas-av-updates.mailfrontier.net. A RD Question
>> -38.0 192.168.44.3:40127 8.8.4.4:53 49118 kas-av-updates.mailfrontier.net. A 25.1 RD No Error. 2 answers
>> -37.6 192.168.44.3:54373 15793 kas-av-updates.mailfrontier.net. A RD Question
>> -36.8 192.168.44.3:50603 20839 kas-av-updates.mailfrontier.net. A RD Question
>> -35.8 192.168.44.3:59500 35732 kas-av-updates.mailfrontier.net. A RD Question
>> -35.1 192.168.44.3:58254 9095 kas-av-updates.mailfrontier.net. A RD Question
>> -34.3 192.168.44.3:51857 43880 kas-av-updates.mailfrontier.net. A RD Question
>> -33.8 192.168.44.3:44658 52531 kas-av-updates.mailfrontier.net. A RD Question
>> -33.4 192.168.44.3:52281 9542 kas-av-updates.mailfrontier.net. A RD Question
>> -32.9 192.168.44.3:59384 46892 kas-av-updates.mailfrontier.net. A RD Question
>>
>>
>> The machine with the dnsdist installed resolves kas-av-updates.mailfrontier.net just fine.
>>
>> I wasn’t able to find any RCODE=2 or RCODE=3 responses for that specific dns name.
>>
>> Help highly appreciated.
>>
>> —Michael
>
>
>
>> _______________________________________________
>> dnsdist mailing list
>> dnsdist at mailman.powerdns.com
>> https://mailman.powerdns.com/mailman/listinfo/dnsdist
—Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2297 bytes
Desc: not available
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20160714/3cbb17c1/attachment-0001.bin>
More information about the dnsdist
mailing list