[Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

[Todd Smith]

Actually that begs one more question--as of right now I actually have network-timeout set to 5000 in recursor.conf, yet obviously it's still timing out considerably sooner than that; is there, say, some other setting (that is, of course, within PowerDNS) that might be conflicting with this causing it time out sooner?

If not (as I suspect), I'll investigate our network settings to see if anything else might be clipping these requests off short.

Many many thanks again
-T

-----Original Message-----
From: bert hubert [mailto:bert.hubert at netherlabs.nl] 
Sent: Tuesday, September 09, 2014 1:39 PM
To: Todd Smith
Cc: 'pdns-users at mailman.powerdns.com'
Subject: Re: [Pdns-users] Recursion issue--SERVFAIL then NOERROR totally at random

On Tue, Sep 09, 2014 at 05:16:24PM +0000, Todd Smith wrote:
> Rather long output here; however, it certainly looks like these results pretty much confirm that the issue is Toyota's, not ours:

> Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] 
> toyotasupplier.com.: Resolved 'toyotasupplier.com.' NS gslb-ns1.toyota-na.com. to: 63.238.139.235 Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] toyotasupplier.com.: Trying IP 63.238.139.235:53, asking 'toyotasupplier.com.|A'
> Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] 
> toyotasupplier.com.: timeout resolving Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] toyotasupplier.com.: Trying IP 12.169.52.62:53, asking 'toyotasupplier.com.|A'
> Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] 
> toyotasupplier.com.: timeout resolving Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] toyotasupplier.com.: Failed to resolve via any of the 2 offered NS at level 'toyotasupplier.com.'
> Sep  9 12:47:17 yoshi pdns_recursor[31821]: [10690756] 
> toyotasupplier.com.: failed (res=-1)

You could try a traceroute to these two addresses to debug, but this indeed does not look like a powerdns issue but more a networking issue!

Note that your timeout does appear to <1 second, you could try raising this with 'network-timeout=2000' and see if this helps (2 seconds).

Good luck!

	Bert
_______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users