Re: Disabling rate-limit?

2016-08-16 Thread John Miller
On Mon, Aug 15, 2016 at 11:23 PM, blrmaani wrote: > From tcpdump, it appears that customers are receiving delayed response and > are too sensitive for timeouts. > > The queries they are sending are authoritative i.e the zone is on our > nameserver. > > How do I trouble-shoot this issue? This is

RE: Re: Disabling rate-limit?

2016-08-16 Thread MURTARI, JOHN
-- Message: 6 Date: Mon, 15 Aug 2016 20:23:17 -0700 (PDT) From: blrmaani To: comp-protocols-dns-b...@isc.org Subject: Re: Disabling rate-limit? Message-ID: Content-Type: text/plain; charset=UTF-8 >From tcpdump, it appears that customers are receiving delayed response and are >too

Re: Disabling rate-limit?

2016-08-15 Thread blrmaani
>From tcpdump, it appears that customers are receiving delayed response and are >too sensitive for timeouts. The queries they are sending are authoritative i.e the zone is on our nameserver. How do I trouble-shoot this issue? This is really intermittent and hard to reproduce.. thanks Blr O

Re: Disabling rate-limit?

2016-08-15 Thread John Miller
Hi Blr, First things first: if your customers are sending queries, this is probably about their own recursive queries timing out, rather than incoming authoritative queries timing out. Something else you should check: are your customers receiving a delayed (say a few seconds) SERVFAIL response, o

Re: Disabling rate-limit?

2016-08-15 Thread Jay Ford
On Mon, 15 Aug 2016, blrmaani wrote: I inherited a DNS server which is running BIND 9.8.x. There was a DNS incident where our customers complained that they saw query timeouts intermittently (Our customers run cassandra/hadoop applications and send same queries repeatedly). They also run nscd o

Disabling rate-limit?

2016-08-15 Thread blrmaani
I inherited a DNS server which is running BIND 9.8.x. There was a DNS incident where our customers complained that they saw query timeouts intermittently (Our customers run cassandra/hadoop applications and send same queries repeatedly). They also run nscd on their hosts but I was told all have