[Pdns-users] dnsdist and udp-in-errors

[janasowieso Nicht]

Hi,

thanks for your reply,

sure,
added the content of the configfile below,

all servers are VMs (openstack), OS is OracleLinux 8 on all servers with
kernel: 4.18.0-553.22.1.el8_10.x86_64
all servers have two SRIOV interfaces in a bond.
dnsdist version is dnsdist-1.9.7-1pdns.el8.x86_64


thanks for your help!
br
Georg


# dnsdist conf /etc/dnsdist/dnsdist.conf:
setLocal("127.0.0.1:5300")


newServer({ address='192.x.x.x', name='xxx-1', useProxyProtocol=true,
sockets=16 })
newServer({ address='192.x.x.y', name='xxx-2', useProxyProtocol=true,
sockets=16 })

controlSocket("127.0.0.1:5199")
setKey("key...")


carbonServer("172.z.z.z")


addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("0.0.0.0:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})
addLocal("[::]:53", {reusePort=true})

webserver("127.0.0.1:8083")
setWebserverConfig({password="pw...", apiKey="key...", acl="x.x.x.x/32,
x.x.x.x/32, x.x.x.x/24, 127.0.0.1/32, "})

pc = newPacketCache(10000000, {maxTTL=86400, minTTL=60,
temporaryFailureTTL=60, staleTTL=60, dontAge=false})
getPool(""):setCache(pc)

setStaleCacheEntriesTTL(3600)


setACL('127.0.0.1/32')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')
addACL('x.x.x.x/x')


setUDPTimeout(3)






On Fri, Nov 8, 2024 at 9:24 AM Remi Gacogne via Pdns-users <
pdns-users at mailman.powerdns.com> wrote:

> Hi,
>
> On 07/11/2024 17:26, janasowieso Nicht via Pdns-users wrote:
> > do you maybe have any idea how we can figure out where these errors are
> > coming from exactly?
> > or if they really indicate a problem?
> > or maybe someone has experienced something similar?
> >
> > would be great if someone has a hint or an idea for us :-)
>
> Please share your complete dnsdist configuration, otherwise it's very
> hard to help you. The "sock_drop" counter from "ss" seem to indicate
> that dnsdist's incoming UDP buffers sometimes get full which is very
> unexpected at 1500 QPS, even without tuning, but without seeing the
> actual configuration it's impossible to know what's going on.
>
> Best regards,
> --
> Remi Gacogne
> PowerDNS.COM BV - https://www.powerdns.com/
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20241108/2beec5bf/attachment.htm>