Hi Yorgos, yes, about serve-expired we have:
serve-expired: yes serve-expired-ttl: 172800 serve-expired-reply-ttl: 300 serve-expired-client-timeout: 1600 ede-serve-expired: yes I've just downgraded one server in our DNS farm from 1.22.0 to 1.21.1 ; UDP Out queries value was immediately divided by 2. Le mer. 6 nov. 2024 à 19:12, Yorgos Thessalonikefs via Unbound-users < [email protected]> a écrit : > Hi Olivier, > > This (more upstream queries) may be related to another issue that we are > investigating. > Do you happen to have serve-expired enabled in Unbound? > > Best regards, > -- Yorgos > > On 06/11/2024 18:56, Olivier Benghozi via Unbound-users wrote: > > ... and CPU usage is x1.5. > > Something seems wrong. > > > > Le mer. 6 nov. 2024 à 18:11, Olivier Benghozi > > <[email protected] <mailto:[email protected]>> a > écrit : > > > > Here we observe a big increase of UDP Out queries when updating from > > 1.21.0 to 1.22.0 (factor x4). > > Doesn't seem to be linked to max-global-quota > > > > Le mer. 6 nov. 2024 à 16:33, Yorgos Thessalonikefs via Unbound-users > > <[email protected] <mailto:unbound- > > [email protected]>> a écrit : > > > > Hi Wolfgang, Otto, > > > > Thanks for bringing this up! > > We also had other operational feedback about the value and we > > decided to > > bump it up to 200 from the initial 128. > > Still keeping the possible amplification factor for CAMP-style > > issues in > > the hundreds. > > > > https://github.com/NLnetLabs/unbound/commit/ > > fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216 <https://github.com/ > > > NLnetLabs/unbound/commit/fd1a1d5fa0f012e8eeaa0ecc89da52d9ca25c216> > > -- *Ce message et toutes les pièces jointes (ci-après le "message") sont établis à l’intention exclusive des destinataires désignés. Il contient des informations confidentielles et pouvant être protégé par le secret professionnel. Si vous recevez ce message par erreur, merci d'en avertir immédiatement l'expéditeur et de détruire le message. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse de l'émetteur*
