[Pdns-users] pdns-recursor issue with resolving domains which placed on ns*.domaincontrol.com name servers

[Максим Подлесный]

We have an issue with resolving domains of our customers via pdns-recursors
(checked on versions 4.0.4 and 3.7.3). Those domains are controls by name
servers ns47.domaincontrol.com and ns48.domaincontrol.com

I can't tell here which domains we are resolving but I found one domain
which are placed on this NS too for example: 9p.com
This domain has same issue. pdns-recursors have timeout during resolving of
this domain. I tried to increase network-timeout to 1 minute. didn't help.
there was same timeout. pdns-recursors on different systems with different
configs have same issue with timeouts.

In the log we had only:
Sending SERVFAIL to 127.0.0.1 during resolve of '9p.com.' because: Too much
time waiting for 9p.com.|A, timeouts: 1, throttles: 0, queries: 4, 6497msec

dig works fine but slow (about 5-6 sec for this domains)

dig @ns47.domaincontrol.com. 9p.com

; <<>> DiG 9.11.0-P3 <<>> @ns47.domaincontrol.com. 9p.com
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51555
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;9p.com. IN A

;; ANSWER SECTION:
9p.com. 600 IN A 50.63.202.46

;; AUTHORITY SECTION:
9p.com. 3600 IN NS ns48.domaincontrol.com.
9p.com. 3600 IN NS ns47.domaincontrol.com.

;; Query time: 44 msec
;; SERVER: 216.69.185.24#53(216.69.185.24)
;; WHEN: Mon Feb 20 22:59:21 EET 2017
;; MSG SIZE  rcvd: 103


real 0m6.065s
user 0m0.010s
sys 0m0.000s


Is that a bug (behavior of pdns-recursor)?
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20170220/76d82142/attachment.html>