Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-02-01 Thread Petr Špaček
On 01. 02. 22 15:43, Anand Buddhdev wrote: On 01/02/2022 15:33, Petr Špaček wrote: Hi Petr, As you correctly noticed, the log message "adjusted limit on open files from 4096 to 1048576" already shows that BIND adjusted OS-level file descriptor limit. The only way out is what Tony wrote in

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-02-01 Thread Anand Buddhdev
On 01/02/2022 15:33, Petr Špaček wrote: Hi Petr, As you correctly noticed, the log message "adjusted limit on open files from 4096 to 1048576" already shows that BIND adjusted OS-level file descriptor limit. The only way out is what Tony wrote in another thread: Add "-S " parameter to bump

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-02-01 Thread Petr Špaček
On 01. 02. 22 13:30, Anand Buddhdev wrote: Hi Ondrej, Do you recommend setting LimitNOFILE=1048576 in the systemd unit file for BIND? I'm not Ondrej, but let me try: No, that would be redundant. As you correctly noticed, the log message "adjusted limit on open files from 4096 to 1048576"

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-02-01 Thread Anand Buddhdev
Hi Ondrej, Do you recommend setting LimitNOFILE=1048576 in the systemd unit file for BIND? Regards, Anand On 28/01/2022 15:03, Anand Buddhdev wrote: Hi Ondrej, It is 1024. I see named logging this: adjusted limit on open files from 4096 to 1048576 I thought there was no need to set

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-02-01 Thread Petr Špaček
s this log: general: error: socket: file descriptor exceeds limit (46474/21000) Hmm, (128+129)*88*2 == 45232, (2 == UDP + TCP) so the big number looks plausible. The 21000 limit comes from a hardcoded value for ISC_SOCKET_MAXSOCKETS. You can adjust -U (number of listeners) on the command l

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-01-28 Thread Tony Finch
Anand Buddhdev wrote: > > The server has many IP addresses. In named.conf, there are 129 IPv6 addresses > in the "listen-on-v6" option and 128 IPv4 addresses in the "listen-on" option. > The server begins running, but then repeatedly emits this log: > > g

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-01-28 Thread Anand Buddhdev
Hi Ondrej, It is 1024. I see named logging this: adjusted limit on open files from 4096 to 1048576 I thought there was no need to set LimitNOFILE=1048576 in the systemd unit file. Am I mistaken? Regards, Anand On 28/01/2022 14:47, Ondřej Surý wrote: Hi Anand, what is your open files

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-01-28 Thread Ondřej Surý
nterface lo, ::1#53 > ... > general: info: sizing zone task pool based on 5486 zones > ... > general: notice: command channel listening on 127.0.0.1#953 > general: info: configuring command channel from '/etc/named/rndc.key' > general: error: socket: file descriptor exceeds limit (464

BIND 9.16.25 "file descriptor exceeds limit" messages

2022-01-28 Thread Anand Buddhdev
'/etc/named/rndc.key' general: error: socket: file descriptor exceeds limit (46474/21000) general: notice: couldn't add command channel ::1#953: not enough free resources ... The server has many IP addresses. In named.conf, there are 129 IPv6 addresses in the "listen-on-v6" option an

Re: file descriptor exceeds limit

2015-06-19 Thread Mike Hoskins (michoski)
On 6/19/15, 4:07 PM, bind-users-boun...@lists.isc.org on behalf of /dev/rob0 bind-users-boun...@lists.isc.org on behalf of r...@gmx.co.uk wrote: On Fri, Jun 19, 2015 at 02:55:23PM -0500, I wrote: On Thu, Jun 18, 2015 at 11:11:16PM +, Mike Hoskins (michoski) wrote: snip Note that

Re: file descriptor exceeds limit

2015-06-19 Thread /dev/rob0
On Fri, Jun 19, 2015 at 02:55:23PM -0500, I wrote: On Thu, Jun 18, 2015 at 11:11:16PM +, Mike Hoskins (michoski) wrote: snip Note that connection tracking can be a problem upstream as well, for the same reasons as described in the article. I would still turn off conntrack for UDP

Re: file descriptor exceeds limit

2015-06-19 Thread Reindl Harald
Am 19.06.2015 um 18:44 schrieb Mike Hoskins (michoski): I suppose the only way to avoid any intermediate firewalls would be to place everything you run on a LAN segment hanging directly off your router/Internet drop with host based firewalls well, if the router is from Cisco and has NAt

Re: file descriptor exceeds limit

2015-06-19 Thread /dev/rob0
On Thu, Jun 18, 2015 at 11:11:16PM +, Mike Hoskins (michoski) wrote: On 6/18/15, 7:09 PM, Stuart Browne stuart.bro...@bomboratech.com.au wrote: Just wondering. You mention you're using RHEL6; are you also getting messages in 'dmesg' about connection tracking tables being full?

Re: file descriptor exceeds limit

2015-06-19 Thread Mike Hoskins (michoski)
On 6/19/15, 1:16 PM, bind-users-boun...@lists.isc.org on behalf of Reindl Harald bind-users-boun...@lists.isc.org on behalf of h.rei...@thelounge.net wrote: Am 19.06.2015 um 18:44 schrieb Mike Hoskins (michoski): I suppose the only way to avoid any intermediate firewalls would be to place

Re: file descriptor exceeds limit

2015-06-18 Thread Mike Hoskins (michoski)
On 6/18/15, 7:09 PM, Stuart Browne stuart.bro...@bomboratech.com.au wrote: Just wondering. You mention you're using RHEL6; are you also getting messages in 'dmesg' about connection tracking tables being full? You may need some 'NOTRACK' rules in your iptables. Just following along, for the

Re: file descriptor exceeds limit

2015-06-18 Thread Mike Hoskins (michoski)
Inline... On 6/18/15, 9:22 AM, Cathy Almond cat...@isc.org wrote: On 18/06/2015 12:00, Matus UHLAR - fantomas wrote: On 17.06.15 22:39, Shawn Zhou wrote: BIND on my resolvers reaches the max open file limit and I am getting lots of SERVFAILs http://pastebin.com/SxRsHLff After I

Re: file descriptor exceeds limit

2015-06-18 Thread Matus UHLAR - fantomas
On 17.06.15 22:39, Shawn Zhou wrote: BIND on my resolvers reaches the max open file limit and I am getting lots of SERVFAILs http://pastebin.com/SxRsHLff After I increased the max-socks (-s 8192) to 8192, I no longer saw the file limit error from the log anymore; however, I am still many

file descriptor exceeds limit

2015-06-17 Thread Shawn Zhou
Hello, BIND on my resolvers reaches the max open file limit and I am getting lots of SERVFAILs http://pastebin.com/SxRsHLff After I increased the max-socks (-s 8192) to 8192, I no longer saw the file limit error from the log anymore; however, I am still many SERVFAILs. Our resolvers were doing

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-05-03 Thread JINMEI Tatuya / 神明達哉
At Thu, 29 Apr 2010 14:53:44 -0700, Dale Kiefling dale.kiefl...@cbs.com wrote: We have a Bind 9.7.0-P1 instance that is throwing the following errors: 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) The fact that the FD limit is 1024 suggests your

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-05-01 Thread Ezra Taylor
, Dale Kiefling dale.kiefl...@cbs.comwrote: We have a Bind 9.7.0-P1 instance that is throwing the following errors: 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.122 general: error: socket: file descriptor exceeds limit (1024

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-04-30 Thread Ezra Taylor
:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.122 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.123 general: error: socket: file descriptor exceeds limit (1024/1024) When we try to increase the socket value

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-04-30 Thread Dale Kiefling
and inittab. On Thu, Apr 29, 2010 at 5:53 PM, Dale Kiefling dale.kiefl...@cbs.com wrote: We have a Bind 9.7.0-P1 instance that is throwing the following errors: 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.122 general: error: socket

Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-04-29 Thread Dale Kiefling
We have a Bind 9.7.0-P1 instance that is throwing the following errors: 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.122 general: error: socket: file descriptor exceeds limit (1024/1024) 21-Apr-2010 17:00:00.123 general: error