[Pdns-users] Query throttled message in pdns_recursor trace log

[hariesfa]

Hi Remi,

Thanks for your reply.
I assume this mechanism is a feature that powerdns has, to protect server
resources. But, is there a way to reconfigure this throttling mechanism ? I
have tried to decrease server-down-throttle-time by hoping that once the
authoritative answered my query, powerdns will keep the record in its
cache.
Because, if i try to use other dns recursor software, they can resolve this
domain.

Regards,


----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 14 Aug 2018 11:57:08 +0200
> From: Remi Gacogne <remi.gacogne at powerdns.com>
> To: pdns-users at mailman.powerdns.com
> Subject: Re: [Pdns-users] Query throttled message in pdns_recursor
>         trace log
> Message-ID: <7203fdb9-a156-f081-a55d-f71a097e6ee2 at powerdns.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi,
>
> On 8/14/18 11:44 AM, haries fajar nugroho wrote:
> > I've got some weird result when query some domains, for
> > example coachingindonesia.com . I got
> > servfail but if i query without www appended, i can get the result.
>
> The servers for this domain are utterly broken, sending REFUSED for
> valid queries: http://dnsviz.net/d/www.coachingindonesia.com/dnssec/
>
> This is the reason why we are throttling it for a while, because we
> don't want to waste our time sending queries to broken servers.
>
> > Below is what i got from my pdns recursor (4.1.3) on Ubuntu 17.10 that
> > installed with apt-get.
> >
> > www.coachingindonesia.com
> > ---------------------------------
> > ; <<>> DiG 9.8.1-P1 <<>> www.coachingindonesia.com @192.168.77.215
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1660
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> >
> > ;; QUESTION SECTION:
> > ;www.coachingindonesia.com.     IN
> >     A
> >
> > ;; ANSWER SECTION:
> > www.coachingindonesia.com. 6021 IN
> >     CNAME   coachingindonesia.com.
> >
> > coachingindonesia.com
> > -------------------------------
> > ;; Query time: 3 msec
> > ;; SERVER: 192.168.77.215#53(192.168.77.215)
> > ;; WHEN: Tue Aug 14 14:23:44 2018
> > ;; MSG SIZE  rcvd: 57
> >
> > ; <<>> DiG 9.8.1-P1 <<>> coachingindonesia.com  @192.168.77.215
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60544
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> >
> > ;; QUESTION SECTION:
> > ;coachingindonesia.com.         IN      A
> >
> > ;; ANSWER SECTION:
> > coachingindonesia.com.  5979    IN
> > A       107.180.76.89
> >
> > ;; Query time: 212 msec
> > ;; SERVER: 192.168.77.215#53(192.168.77.215)
> > ;; WHEN: Tue Aug 14 14:24:26 2018
> > ;; MSG SIZE  rcvd: 55
> >
> > I found that domains that failed to resolved had "query throttled"
> > message, like : [2]  coachingindonesia.com: query throttled
> > 216.69.185.1, coachingindonesia.com; A.
> > I don't know what i have to do, because i can query that domain if i use
> > another dns recursor software in the same machine and IP
> >
> > I also attached the trace log query for that domain.
>
>
> Best regards,
> --
> Remi Gacogne
> PowerDNS.COM BV - https://www.powerdns.com/
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 488 bytes
> Desc: OpenPGP digital signature
> URL: <http://mailman.powerdns.com/pipermail/pdns-users/
> attachments/20180814/af8ac492/attachment-0001.sig>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users
>
>
> ------------------------------
>
> End of Pdns-users Digest, Vol 187, Issue 12
> *******************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20180815/f5627d21/attachment-0001.html>