[Pdns-users] recursor 4.0.4 and SERVFAIL

[David]

On 2018-09-10 9:41 AM, bitsof info wrote:
> Thanks Bert
> 
> 1. Yes the setting was done via the console on a running server with the 
> command below
> 
> rec_control trace-regex 
> 'api.my.domain.com.$|some.other.address.domain.com.$'
> 
> 2. the recursor.conf has "#trace=yes" comented out, but not sure if this 
> has to be active for the trace-regex to work, doc was not clear on that.
> 
> 3. The fqdn "api.my.domain.com <http://api.my.domain.com/>" is the one 
> listed w/ SERVFAILs (it returns a CNAME for 
> "some.other.address.domain.com <http://some.other.address.domain.com/>")
> 
> 4. The logs do show what appears to be pretty detailed info about cache 
> hits/missies (when trace-regex is on) and the recursion done to fine the 
> CNAME address etc. But despite failures in clients and SERVFAIL counter 
> going up for the address, I don't see any errors or anything related to 
> SERVFAIL ion the logs (looking at var/logs/messages)
> 
> 5. the recursor.conf has no log level set so I assume the daemon is 
> using the syslog default *.info and greater. The logs in var log 
> messages give not severity but I assume the logging is working as I see 
> messages there just nothing pertaining to SERVFAIL


It doesn't actually log it as "ServFail" or "SERVFAIL" in the trace log 
like that.

I would look for:

egrep "yourname.*(failed|Failed|throttled|timeout)" and work your way up 
the log to see what happened.

> 
> thanks!
> Jim
> 
> On Sat, Sep 8, 2018 at 10:16 AM bert hubert <bert.hubert at powerdns.com 
> <mailto:bert.hubert at powerdns.com>> wrote:
> 
>     Dear mr "Bits of Info G" (is it ok if I call you that? you do
>     realise it is
>     somewhat rude to show up with an obvious fake name?)
> 
>     Can you share your trace-regex setting please?  How did you set it, with
>     rec_control?  Can you also check your loglevel, these traces are
>     logged at
>     Warning level.
> 
>              Bert
> 
>     On Fri, Sep 07, 2018 at 06:10:54PM -0600, bitsofinfo wrote:
>      > Hi,
>      >
>      > Running pdns-recursor 4.0.4
>      >
>      > In the web interface UI we see many "Servfail Domain" entries listed
>      > with counts
>      >
>      > For some of these names/domains we have set trace-regex from the
>     command
>      > line.
>      >
>      > The issue is that we can find nothing in the logs showing any
>     SERVFAIL
>      > errors, but only successful cache hits and lookups yet this number
>      > increments.
>      >
>      > How can we get to the bottom of this or see the reasons and debug
>      > information that is generating these SERVFAILs?
>      >
>      > thanks
>      >
>      > _______________________________________________
>      > Pdns-users mailing list
>      > Pdns-users at mailman.powerdns.com
>     <mailto:Pdns-users at mailman.powerdns.com>
>      > https://mailman.powerdns.com/mailman/listinfo/pdns-users
> 
> 
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users
>