[Pdns-users] Pdns answer for non-existing zones
gaetan at nexylan.com
Thu Feb 23 15:48:57 UTC 2012
I understand you cannot support this request. But, for sure, NOERROR does
not cause recursors to try the other nameservers. The thousands of
websites that went down this night can prove it.
I know my setup is not perfect but this is the best we can. Our customers
are free to use our powerdns for secondary dns service, even if they
"forgot" to transmit us the configuration.
Le 23/02/12 16:41, « Peter van Dijk » <peter.van.dijk at netherlabs.nl> a
>On Feb 23, 2012, at 16:40 , Gaëtan Allart wrote:
>> Hello Peter,
>> Right, but technically, a serverfail reply makes the end-user (browser,
>> os) rely on other DNS servers for resolving the zone. Whereas the reply
>> provided by 3.0.1 does not.
>> This night, after the upgrade, we had thousands of websites that went
>> (50% time when query got on pdns without zone) because of this change.
>> Emergency solution has been to shut powerdns down and make websites rely
>> on primary dns only, they went back online immediately.
>Again, both the 126.96.36.199 and 3.0.1 responses should cause recursors to
>try the other nameserver; additionally, SERVFAIL caused other problems,
>which is why we moved to NOERROR.
>What you are reporting is not a bug and we cannot support your situation.
>You are likely to have bundles of hidden breakage in your setup, even
>with the 188.8.131.52 behaviour.
>Peter van Dijk
>Pdns-users mailing list
>Pdns-users at mailman.powerdns.com
More information about the Pdns-users