On 10/31/2017 04:41 PM, Matthias Cramer wrote:
> I found out that when I set dnssec to false the it seams to work much
> better. Also setting minimum-ttl-override to 60 helps a lot, even
> When dnssec is enabled but only on 3 of 4 resolvers.
>
> Can you give me a hint how I can get all the
Hi Remi
I found out that when I set dnssec to false the it seams to work much better.
Also setting minimum-ttl-override to 60 helps a lot, even When dnssec is
enabled but only on 3 of 4
resolvers.
Can you give me a hint how I can get all the queries you are looking for logged?
Attached is a
Hello Matthias,
On 10/31/2017 03:40 PM, Matthias Cramer wrote:
> We do see no evidence in the log why the record has been put into the
> negative cache!
Any chance you could post the full log between the two queries, or at
least every query under world-gen.g.aaplimg.com?
Best regards,
--
Remi
Hi All
We see that the RR for world-gen.g.aaplimg.com get frequently into the negative
cache on all out pdns recursors.
I bade a trace of the lookups and get the following:
Oct 31 15:14:24 ac-rns1 pdns_recursor[20365]: Oct 31 15:14:24 2 [187716/1]
question for 'world-gen.g.aaplimg.com|A' from
