Re: Very long delays, is it just djbdns?

On 15 Nov 2010, at 11:10, Hauke Lampe wrote:
> On 13.11.2010 08:19, Sabahattin Gucukoglu wrote:
>> Try this command from a nice, clean dnscache:
>> host -v 2001:470:1f09:103e::2354
>=20
> Yes, it's slow for me, too.
>=20
> It takes dnscache several queries and 25 seconds to return NXDOMAIN.
> Unbound responds in 1.5 seconds, including DNSSEC validation and
> "harden-referral-path" option.
>=20
>> I haven't got to the bottom of it yet, but if anybody has a clue, =
please do share!
>=20
> I think it has to do with dnscache resolving all glue before =
proceeding
> to the next level. The log shows a lot of outgoing queries and several
> "input/output errors" as well as "protocol errors".

Yes.  As to why, it's odd, since by default dnscache trusts glue when =
available and doesn't go up to the authority servers.  So, except for =
resolving the names in delegations, all of these queries seem to be =
overkill, and a bit counterintuitive.  And it only needs one NS in each =
set, not every single one of them.  Really not sure what's happening =
there ...

Unbound, there's the one half I might get into, not so much NSD, at =
least not yet.

Cheers,
Sabahattin