On 2026-09-12 23:59:08 +0200, Vincent Lefevre wrote: > On 2026-09-12 01:09:06 +0700, Max Nikulin wrote: > > Again, if you are saying that without AAAA query resolver reliably gets IPv4 > > addresses, it might be an approach. By the way, resolv.conf(5): > > > > options > > no-aaaa (since glibc 2.36) > > Interesting to know. I'll suggest that to the admin.
To be clearer: dig queries only IPv4 by default (for the "-t type" option: "The default query type is A"), and I sometimes get SERVFAIL with it, but a request a few seconds later seems to always succeed. So the no-aaaa would probably not avoid name-resolving errors for IPv4. But I think that this may solve the caching issue, which may be that nscd assumes that a cache entry that is not empty is valid, e.g. if for AF_UNSPEC, it gets a SERVFAIL for IPv4 and an address for IPv6, nscd possibly assumes that it is OK to cache only the IPv6 address and completely forget about the SERVFAIL (even after an AF_INET query that gives an IPv4 address). -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
