[Pdns-users] [Recursor] Resolving large RRsets
I do not have access to a PowerDNS Recursor and I would be glad if people could test and see if they can resolve the RRset all-wikileaks.bortzmeyer.fr (2200 bytes) as explained here: http://www.bortzmeyer.org/size-dns-wikileaks.html ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] [Recursor] Resolving large RRsets
On Mon, Dec 13, 2010 at 09:07:10AM +0100, Stephane Bortzmeyer wrote: > I do not have access to a PowerDNS Recursor and I would be glad if > people could test and see if they can resolve the RRset > all-wikileaks.bortzmeyer.fr (2200 bytes) as explained here: Hi Stephane! Appears to work. Here is the log: Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: Resolved 'bortzmeyer.fr.' NS ns3.bortzmeyer.org. to: 217.70.190.232 Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: Trying IP 217.70.190.232:53, asking 'all-wikileaks.bortzmeyer.fr.|A' Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: truncated bit set, retrying via TCP Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: using TCP with 217.70.190.232:53 Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: Got 127 answers from ns3.bortzmeyer.org. (217.70.190.232), rcode=0, in 113ms Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|85.214.152.209' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|85.214.211.31' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|85.228.223.86' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|85.234.52.52' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|86.59.113.123' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|87.98.189.48' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|87.106.74.126' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|87.106.138.84' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|87.118.98.174' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|87.239.128.202' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.191.63.114' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.191.75.167' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.198.13.144' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.198.16.164' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.198.19.45' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|88.198.41.172' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|89.45.174.184' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|89.238.75.193' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|89.238.82.30' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|89.238.82.62' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|89.238.82.216' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.90.24.188' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.121.8.176' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.121.49.231' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.142.190.110' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.205.213.90' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: accept answer 'all-wikileaks.bortzmeyer.fr.|A|91.217.57.244' from 'bortzmeyer.fr.' nameservers? YES! Dec 13 09:23:54 [1] all-wi
Re: [Pdns-users] [Recursor] Resolving large RRsets
On Mon, Dec 13, 2010 at 09:30:18AM +0100, bert hubert wrote a message of 286 lines which said: > Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: truncated bit set, > retrying via TCP This is not perfect: with BIND and Unbound, there is no fallback to TCP since they use EDNS0 (with a default buffer size of 4096 bytes, which is enough for this RRset). Why does PowerDNS do not use EDNS0? ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] [Recursor] Resolving large RRsets
On Mon, Dec 13, 2010 at 09:35:47AM +0100, Stephane Bortzmeyer wrote: > On Mon, Dec 13, 2010 at 09:30:18AM +0100, > bert hubert wrote > a message of 286 lines which said: > > > Dec 13 09:23:54 [1] all-wikileaks.bortzmeyer.fr.: truncated bit set, > > retrying via TCP > > This is not perfect: with BIND and Unbound, there is no fallback to > TCP since they use EDNS0 (with a default buffer size of 4096 bytes, > which is enough for this RRset). Why does PowerDNS do not use EDNS0? We actually have that code, and it turns out it leads to a lot of fallback to non-EDNS0 after timeouts. The net effect of EDNS0 usage is heavily negative, especially when truncated answers are rare. Since almost no TCP overhead is saved, each timeout caused by EDNS0-probing is very expensive. Let alone the EDNS0 path MTU probing etc. In short, for non-DNSSEC workloads, it is not worth it. A nice middleground is what Nominum does, only try EDNS0 in case a tc=1 answer is seen, that might be worth it. But, the logic is there in the PowerDNS Recursor, and it will be hooked up again once we do DNSSEC for validation. Bert ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users