Hi Remi, Thanks for your reply. I assume this mechanism is a feature that powerdns has, to protect server resources. But, is there a way to reconfigure this throttling mechanism ? I have tried to decrease server-down-throttle-time by hoping that once the authoritative answered my query, powerdns will keep the record in its cache. Because, if i try to use other dns recursor software, they can resolve this domain.
Regards, ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 14 Aug 2018 11:57:08 +0200 > From: Remi Gacogne <[email protected]> > To: [email protected] > Subject: Re: [Pdns-users] Query throttled message in pdns_recursor > trace log > Message-ID: <[email protected]> > Content-Type: text/plain; charset="utf-8" > > Hi, > > On 8/14/18 11:44 AM, haries fajar nugroho wrote: > > I've got some weird result when query some domains, for > > example coachingindonesia.com . I got > > servfail but if i query without www appended, i can get the result. > > The servers for this domain are utterly broken, sending REFUSED for > valid queries: http://dnsviz.net/d/www.coachingindonesia.com/dnssec/ > > This is the reason why we are throttling it for a while, because we > don't want to waste our time sending queries to broken servers. > > > Below is what i got from my pdns recursor (4.1.3) on Ubuntu 17.10 that > > installed with apt-get. > > > > www.coachingindonesia.com > > --------------------------------- > > ; <<>> DiG 9.8.1-P1 <<>> www.coachingindonesia.com @192.168.77.215 > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1660 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 > > > > ;; QUESTION SECTION: > > ;www.coachingindonesia.com. IN > > A > > > > ;; ANSWER SECTION: > > www.coachingindonesia.com. 6021 IN > > CNAME coachingindonesia.com. > > > > coachingindonesia.com > > ------------------------------- > > ;; Query time: 3 msec > > ;; SERVER: 192.168.77.215#53(192.168.77.215) > > ;; WHEN: Tue Aug 14 14:23:44 2018 > > ;; MSG SIZE rcvd: 57 > > > > ; <<>> DiG 9.8.1-P1 <<>> coachingindonesia.com @192.168.77.215 > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60544 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 > > > > ;; QUESTION SECTION: > > ;coachingindonesia.com. IN A > > > > ;; ANSWER SECTION: > > coachingindonesia.com. 5979 IN > > A 107.180.76.89 > > > > ;; Query time: 212 msec > > ;; SERVER: 192.168.77.215#53(192.168.77.215) > > ;; WHEN: Tue Aug 14 14:24:26 2018 > > ;; MSG SIZE rcvd: 55 > > > > I found that domains that failed to resolved had "query throttled" > > message, like : [2] coachingindonesia.com: query throttled > > 216.69.185.1, coachingindonesia.com; A. > > I don't know what i have to do, because i can query that domain if i use > > another dns recursor software in the same machine and IP > > > > I also attached the trace log query for that domain. > > > Best regards, > -- > Remi Gacogne > PowerDNS.COM BV - https://www.powerdns.com/ > > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: signature.asc > Type: application/pgp-signature > Size: 488 bytes > Desc: OpenPGP digital signature > URL: <http://mailman.powerdns.com/pipermail/pdns-users/ > attachments/20180814/af8ac492/attachment-0001.sig> > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Pdns-users mailing list > [email protected] > https://mailman.powerdns.com/mailman/listinfo/pdns-users > > > ------------------------------ > > End of Pdns-users Digest, Vol 187, Issue 12 > ******************************************* >
_______________________________________________ Pdns-users mailing list [email protected] https://mailman.powerdns.com/mailman/listinfo/pdns-users
