-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
On 08/25/2014 06:58 AM, Thomas Guthmann wrote: > Hi, > > Like this ? > > 15 A IN http???www.reddit.com. 221.211696 iterator wait for > 173.245.58.24 22 AAAA IN http???www.reddit.com. 0.097014 iterator > wait for 198.41.222.24 Yes. The reddit servers (or likely, their load-balancers) are not following the DNS specifications. They are dropping the query and they should be replying. There was a draft at the IETF even to mark this as harmful, but it did not progress through the standards track, I believe. If they want to refuse the query for unclear reasons (what is wrong with responding NXDOMAIN?) they could choose from nice error codes like SERVFAIL and FORMERR and REFUSED. Unbound notices the domain does not respond to A queries. And marks the domain as timeouted, down, for A queries. Unbound stops sending A queries there to attempt to trottle down traffic towards that stricken server. If A queries get replies (there is an exponential backoff to the queries sent out) then unbound marks the server as responsive again (the server is considered back up) and queries are resumed. Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJT+uLWAAoJEJ9vHC1+BF+N39wP/jU1xWEwCgfMdmntb1zwfob8 EeU3a6/aAyX3RmNURahsp9btg1aT6E29muEGwScypEHpJ/lfHcVe9pyOiVx2u0di hn72Ys8htjVPhTrf7TNd5bS0S/ylnJNwBwTkDX8DHtokkMEWhVOciQrF+bTDJQO0 EYrbLMrzIau9MKoRWyBp4e7Nuhqzl6lJDx4y/GXqyW63zpkvlyyiSbGlhaqrZe2A n0eJbVp44UL3WjgZylI/KRNNiQOV3dvwRmRYT84URh/iMPItQHlsk5S39PUm+NSv VK+x0iV5Jzd8VO8ywMbIWJepmCaAShBP38dWishVPWpmaK9Vp8ZnymRGYV/I3LkH JYBsMaJpiZgJEDtrky9bmlLwAelOdNbHONvwTGNIu27/0X3hCKvq+8tgROucdpyl Na/4kXAltX9aKL6cZSgoTbmWFeN2vobVV5TDAFmPGm04ctfHCi13So0RL43+I4ZC pBLGC/8IG+wjZVc5/mjzB98xYwQ/3XSf0iquidxolOzxwGfohKfgtp55YLBwXr2/ ZQQEVqPJWdHHPJC7N28J1ilZW7rTJMkgemXpWuzr8TszaIw+UMDCGc0sbVAkrNtN 8zRzBaQ4IoCJbnWzlVfvrgnVW9F2y05PsWqxylZuWmrYdnNixg2trOemftj3Z4x/ YiP1s6Pb+vUM20jW+Ssn =pS0r -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
