[dnsdist] dnsdist 1.4 and Debian Buster

Chris lists+pdns at gbe0.com
Wed Aug 7 09:39:03 UTC 2019

Hi all,

I have started replacing my dnsdist servers that are running Debian 
Stretch with the updated Debian Buster release. I came across an issue 
where dnsdist is running for a period of time it will stop answering any 
UDP queries until it is restarted. Sending queries either externally to 
the server or from the server itself results in a timeout.

The server is running on bare metal and is receiving around 900-1200 
queries/second. There is multiple dnsdist instances running for 
different purposes, there is 8 instances total. Each instance is bound 
to a different set of IP's, no IP's are shared between dnsdist 
instances. For better performance I am using reusePort with 4 listeners 
normally, for this issue I tried removing the additional listeners and 
removing the reusePort setting but it still occured.

With reusePort enabled the issue occurs after a short period of time 
usually between 30 and 40 seconds from the period queries start getting 
sent to it. Without reusePort enabled and a single listen thread the 
issue seems to occur after around 4-5 hours, when it occurs the symptom 
seems the same. Once the issue occurs it doesn't seem to recover itself 
(I waited for around 30 hours) until the dnsdist service is restarted.

The dnsdist console and API/web interface continues to work. I can also 
see dnsdist sending out the health checking queries to the backends and 
it correctly marks them as up or down. TCP queries also work fine.

I had a look through the servers logs but couldn't find anything that 
could be related to this problem in syslog/messages/dmesg. I do raise 
the open file limit and the tasksmax limits applied by systemd.

The configuration I am using has been migrated from the older 1.3 
dnsdist release with a few changes to the configuration to make use of 
newer features as the config was built a few years ago.

I also gave the current master release a go but that also had the same 

I am wondering if anyone else has had the same issue? If the 
configuration I am using would be useful I can upload a copy of that.


More information about the dnsdist mailing list