Ok, so according to zonemaster: https://zonemaster.net/en/result/7fc39ff8fc1766ac all the nameservers are in the same zone. I am guessing that any intermittent failure can cause a lot of outgoing queries.
Anyway - since you are hitting the 32 limit, perhaps bumping the limit to 100 (the value before) would help in your case? I am guessing the resolver is being used for a limited set of clients and the chance of this specific abuse is quite low. https://bind9.readthedocs.io/en/v9.18.29/notes.html#notes-for-bind-9-18-29 Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 6. 9. 2024, at 21:13, Ondřej Surý <ond...@isc.org> wrote: > Now the question remains - why? I don’t really see a reason for this > behavior from where I tested it, so what is the traffic between your recursor > and the Internet during the time this happens? > > Ondřej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 6. 9. 2024, at 20:54, Peter <p...@citylink.dinoex.sub.org> wrote: >> >> Sep 6 20:31:59 <local1.debug> pole named[71152]: resolver: debug 3: >> exceeded max queries resolving 'ns1.edns.t-ipnet.de/AAAA' (querycount=33, >> maxqueries=32) > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
