[Pdns-users] udp-in-errors , AXFR and zones timeouts

[Marcello Lupo]

Hi,
yes I totally agree with you.
Hope the developers will place an option to tune this functionality.
Thank you
Bye


> Il giorno 29 dic 2020, alle ore 10:06, Winfried Angele <winfried.angele at gmail.com> ha scritto:
> 
> Hello Marcello,
> 
> Verry good! But in my opinion the DNS server should not send out SOA queries faster than it can pickup the answers. Raising the buffers helps only up to a certain burst length. If you have more zones, the problem comes back.
> 
> Winfried
> 
> 
> 
> Am 29. Dezember 2020 09:17:06 MEZ schrieb Marcello Lupo <mlist at itspecialist.it>:
> He Winfried,
> yes it seems to be the same issue.
> I tried to raise the kernel rmem limits with:
> 
> sysctl -w net.core.rmem_max=26214400
> sysctl -w net.core.rmem_default=26214400
> 
> and the issue seems to be solved.
> I will monitor it the next days.
> Thank you
> Bye
> Marcello
> 
> Il giorno 28 dic 2020, alle ore 22:26, Winfried Angele <winfried.angele at gmail.com> ha scritto:
> 
> Hi Marcello,
> 
> It looks like this is the same issue which I reported already:
> 
> https://github.com/PowerDNS/pdns/issues/9112
> 
> Maybe you can report your observations there as well.
> 
> Winfried
> 
> 
> Am 28. Dezember 2020 21:41:21 MEZ schrieb Marcello Lupo via Pdns-users <pdns-users at mailman.powerdns.com>:
> Hello,
> I have configured a PDNS Authoritative server (v 4.4.0) with many slave zones provisioned with superslave and supermasters mechanism.
> At the moment I have around 1400 zones provisioned from 5 bind master servers.
> 
> I’m getting a lot of:
> 
> Dec 28 21:00:02 pdns-db2 pdns_server-global[6838]: Received serial number updates for 374 zones, had 19 timeouts
> Dec 28 21:05:23 pdns-db2 pdns_server-global[6838]: Received serial number updates for 395 zones, had 47 timeouts
> Dec 28 21:06:34 pdns-db2 pdns_server-global[6838]: Received serial number updates for 303 zones, had 15 timeouts
> Dec 28 21:16:07 pdns-db2 pdns_server-global[6838]: Received serial number updates for 394 zones, had 43 timeouts
> Dec 28 21:21:25 pdns-db2 pdns_server-global[6838]: Received serial number updates for 599 zones, had 66 timeouts
> Dec 28 21:22:41 pdns-db2 pdns_server-global[6838]: Received serial number updates for 521 zones, had 22 timeouts
> Dec 28 21:26:56 pdns-db2 pdns_server-global[6838]: Received serial number updates for 455 zones, had 28 timeouts
> Dec 28 21:28:08 pdns-db2 pdns_server-global[6838]: Received serial number updates for 235 zones, had 26 timeouts
> 
> I checked with tcpdump on both the master DNS and the powerdns itself and all answers to the AXFR requests starting from pdns server are correctly received on the pdns server but seems that are not handled by the system and give the timeout error. The udp-in-errors counter is raising every time of the exact number of the timeouts received. As the documentation says the udp-in-errors value seems to be related to packet received but cannot be handled from the pdns server itself.
> I’m almost sure that it is a problem of resource tuning but I haven’t idea of what I should tune to avoid this behavior.
> In the short future we will need to reach around 15k domains managed by this DNS server and I would like to do not have this issue.
> In my scenario this server is dedicated only to the provisioning of domains and it do not answer to requests coming from internet. Requests coming from internet are handled from many servers balanced that rely on the mariadb replication of the PDNS DB main server.
> Do you have any ideas?
> Thank you
> Bye
> Marcello
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users
>