On Fri, Sep 06, 2024 at 09:12:51PM +0200, Ondřej Surý wrote: ! Now the question remains - why? I don’t really see a reason for this ! behavior from where I tested it, so what is the traffic between your ! recursor and the Internet during the time this happens?
Well, I can see why - but I don't know if this is all as intended: * Query comes along "tel.t-online.de. IN NAPTR" * RESOLVER_QUERY goes to 2003:180:4:10a::2:53 (I don't know where that comes from. Cache? * Response gives *six* authoritative: ns1...ns6.edns.t-ipnet.de. * 12 queries (v4/v6) go to the root servers * we get 12 identical answers, containing *six* servers for "de." * 12 queries go to z.nic.de. * we get 12 identical answers, containing five servers for "t-ipnet.de." * 6 queries go to dns20.dns.t-ipnet.de. * we get 6 answers and cannot use them, because 1+12+12+6 = 31 * SERVFAIL You have the details in the attachment on one of my mails. It looks logically correct to me. If this is not how it is supposed to work, then tell me. I didn't build it ;) - I just tried to understand it and then make it work nicely. And I did not hack that part! - only the dnstap, to get to the information that is needed for this kind of analysis (microseconds and view). cheerio, PMc -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
