Hello!

You probably have to increase 
https://www.knot-dns.cz/docs/latest/singlehtml/index.html#quic-outbuf-max-size

Daniel

On 1/4/26 10:46, SUN Guonian via knot-dns-users wrote:
Greetings,

I have tried to use QUIC in zone transfering, I met one error in on bigger zone,

from master's log, it displayed,
2026-01-04T17:32:19+0800 debug: [foo.] ACL, allowed, action transfer, remote 
10.0.0.147@60880 QUIC cert-key xJKsDkUqpl6orXeTwsrDgDvgZ/PiYxOSVlOkVdn5EOU=
2026-01-04T17:32:19+0800 info: [foo.] IXFR, outgoing, remote 10.0.0.147@60880 
QUIC, incomplete history, serial 2026010403, fallback to AXFR
2026-01-04T17:32:19+0800 debug: [foo.] ACL, allowed, action transfer, remote 
10.0.0.147@60880 QUIC cert-key xJKsDkUqpl6orXeTwsrDgDvgZ/PiYxOSVlOkVdn5EOU=
2026-01-04T17:32:19+0800 info: [foo.] AXFR, outgoing, remote 10.0.0.147@60880 
QUIC, started, serial 2026010404
2026-01-04T17:32:20+0800 info: [foo.] AXFR, outgoing, remote 10.0.0.147@60880 
QUIC, buffering finished, 0.87 seconds, 7390 messages, 124493148 bytes
2026-01-04T17:32:20+0800 notice: QUIC, terminated connections, outbuf limit 1

on the slave side, I got log as,
2026-01-04T17:32:18+0800 info: [foo.] zone file loaded, serial 2026010403
2026-01-04T17:32:19+0800 info: [foo.] loaded, serial none -> 2026010403, 
92000117 bytes
2026-01-04T17:32:19+0800 info: [foo.] refresh, remote 10.0.0.151@853, remote 
serial 2026010404, zone is outdated
2026-01-04T17:32:19+0800 info: server started

(and, the knotd on slave will down without log.)

Thanks in advance.


My testing environment is,

the zone size is 1,000,000 x ( 2 NS + 2 A ), such as,
domain00000000  3600    NS      ns1.domain00000000
                 3600    NS      ns2.domain00000000
ns1.domain00000000      3600    A       10.0.0.1
ns2.domain00000000      3600    A       10.0.0.2
...
domain00999999  3600    NS      ns1.domain00999999
                 3600    NS      ns2.domain00999999
ns1.domain00999999      3600    A       10.0.0.1
ns2.domain00999999      3600    A       10.0.0.2

If I decrease the record number to 500,000 x ( 2 NS + 2 A ), the zone could be 
transfer with QUIC successfully.

For traditional TCP and TLS, the zone transfer is processed without error, even 
for more large size.

Version in master and slave are both 3.5.2, installed from copr.
OS in both side is Rocky9 x86_64.

Best Regards,
SUN Guonian

--

--

Reply via email to