Knot Resolver issueshttps://gitlab.nic.cz/knot/knot-resolver/-/issues2018-09-12T11:08:36+02:00https://gitlab.nic.cz/knot/knot-resolver/-/issues/287crash on startup if cache directory is not writeable2018-09-12T11:08:36+02:00Petr Špačekcrash on startup if cache directory is not writeable```
$ chmod u-w .
$ kresd
[cache] LMDB error: Permission denied
kresd: lib/cdb_lmdb.c:67: lmdb_error: Assertion `false' failed.
Aborted (core dumped)
``````
$ chmod u-w .
$ kresd
[cache] LMDB error: Permission denied
kresd: lib/cdb_lmdb.c:67: lmdb_error: Assertion `false' failed.
Aborted (core dumped)
```https://gitlab.nic.cz/knot/knot-resolver/-/issues/278confusing error message when root hints cannot be loaded2017-12-17T01:10:17+01:00Horigome Yoshihitoconfusing error message when root hints cannot be loadedI compile 1.5.0 from the source file and try to find the root.hints file even though I set the following parameters in the setting file.
```
modules = {
'view', -- Views for certain clients
predict = {
...I compile 1.5.0 from the source file and try to find the root.hints file even though I set the following parameters in the setting file.
```
modules = {
'view', -- Views for certain clients
predict = {
window = 60, -- 60 minutes sampling window
period = 24*(60/15) -- track last 24 hours
},
'daf',
'hints', -- Load /etc/hosts and allow custom root hints
'stats', -- Track internal statistics
}
modules.list() -- Check module call order
hints.root_file = ('named.root')
```
```
$ sudo kresd --version
Knot DNS Resolver, version 1.5.0
```
```
$ sudo /usr/local/sbin/kresd -c /etc/knot-resolver/kresd.conf -v -f 1 -k /etc/knot-resolver/root.keys /var/knot-resolver
[system] bind to 'fe80::25fb:404d:7dd0:3f8b@9953' Invalid argument
[ 0][plan] plan '.' type 'DNSKEY'
[46588][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[46588][resl] => using root hints
[50083][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[50083][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 1, mempool: 81952 B
[ ta ] new state of trust anchors for a domain:
. 172800 DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
[ ta ] new state of trust anchors for a domain:
. 172800 DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
. 172800 DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
error when opening '/etc/knot-resolver//root.hints': failed to open root hints file
```https://gitlab.nic.cz/knot/knot-resolver/-/issues/240cache size limitation does not work properly with multiple processes2017-09-06T15:45:11+02:00Petr Špačekcache size limitation does not work properly with multiple processesIt seems that kresd cache flush does not work with multile processes.
Setup: kresd 536fa6106767db144dec6342afbb8ef9528ae7cd (branch quit-fix-2) with configuration `kresd -f 16` and LMDB `cache.size = 3 * GB`.
As far as I can tell the f...It seems that kresd cache flush does not work with multile processes.
Setup: kresd 536fa6106767db144dec6342afbb8ef9528ae7cd (branch quit-fix-2) with configuration `kresd -f 16` and LMDB `cache.size = 3 * GB`.
As far as I can tell the flusing sometimes does not work because kresd fills 4 GB filesystem completely instead of stopping at 3 GB. Sometimes I can see sharp drop in disk usage from 3 GB to few MBs but sometimes the cache grows on and on until the FS is full.
This can be reproduced using query list from `entrada:/srv/entrada/_upload/odvr/2017-08-25T09\:23\:01+0000`, just replay the traffic to the resolver. I'm going to attach my script I use to replay the traffic.Vladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/236kresd crashes when network configuration changes2017-10-06T15:09:12+02:00Jan Včelákkresd crashes when network configuration changesEnvironment: Turris 1.3.1 on Turris Omnia
Sorry for vague description but this is all I have. My ISP had an outage and IP configuration on WAN disappeared for ~10 minutes. When they recovered, kresd was not running any longer. I guess t...Environment: Turris 1.3.1 on Turris Omnia
Sorry for vague description but this is all I have. My ISP had an outage and IP configuration on WAN disappeared for ~10 minutes. When they recovered, kresd was not running any longer. I guess the daemon had to crash as a result of network configuration change on the WAN interface. I don't have any logs that would prove that.
Config:
```
root@turris:~# ps w | grep kresd
10169 root 212m S /usr/bin/kresd -c /tmp/kresd.config -f 1 /tmp/kresd -a 0.0.0.0 53 -a :: 53 -k /etc/root.keys
10485 root 1088 S grep kresd
root@turris:~# cat /tmp/kresd.config
--Automatically generated file; DO NOT EDIT
modules = {
'hints > iterate'
, 'policy'
, 'stats'
, predict = {
window = 30 -- 30 minutes sampling window
, period = 24*(60/30) -- track last 24 hours
}
}
hints.config('/tmp/kresd/hints.tmp')
net.bufsize(4096)
net.ipv4=true
net.ipv6=false
cache.open(200*MB)
cache.clear()
```Jan PavlinecJan Pavlinechttps://gitlab.nic.cz/knot/knot-resolver/-/issues/204hints: interpretation of hosts file with multiple entries2017-12-17T01:10:18+01:00Vladimír Čunátvladimir.cunat@nic.czhints: interpretation of hosts file with multiple entriesIf one line contains multiple names for the address, the *first* name should be the canonical one (i.e. used for reverse lookups). In the current implementation the last one wins. Discovered on https://forum.turris.cz/t/dns-forwarding-...If one line contains multiple names for the address, the *first* name should be the canonical one (i.e. used for reverse lookups). In the current implementation the last one wins. Discovered on https://forum.turris.cz/t/dns-forwarding-to-a-different-dns-for-the-internal-lan/4039/181.3.2https://gitlab.nic.cz/knot/knot-resolver/-/issues/203DNS64 synthesis not working for CNAME responses2017-12-17T01:10:18+01:00Ondřej CaletkaDNS64 synthesis not working for CNAME responsesUsing kresd 1.2.6 on Turris Omnia, I've set up DNS64 using this snippet:
modules.load('dns64')
dns64.config('64:ff9b::')
It works well mostly but somehow it fails to synthetise AAAA response if the answer is indirected by a CNA...Using kresd 1.2.6 on Turris Omnia, I've set up DNS64 using this snippet:
modules.load('dns64')
dns64.config('64:ff9b::')
It works well mostly but somehow it fails to synthetise AAAA response if the answer is indirected by a CNAME. For instance:
```
$ dig www.regiojet.cz aaaa
; <<>> DiG 9.11.0-P3 <<>> www.regiojet.cz aaaa
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29320
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.regiojet.cz. IN AAAA
;; ANSWER SECTION:
www.regiojet.cz. 3310 IN CNAME brn-web02.sa.cz.
;; Query time: 3 msec
;; SERVER: 2001:718:e:ed14::1#53(2001:718:e:ed14::1)
;; WHEN: So čen 03 14:53:53 CEST 2017
;; MSG SIZE rcvd: 71
```1.3.xhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/200policy: update aho-corasick code2017-12-17T01:10:18+01:00Vladimír Čunátvladimir.cunat@nic.czpolicy: update aho-corasick code-bugs +speed
See https://gitter.im/CZ-NIC/knot-resolver?at=592d2fb7f3001cd34270f0cb and followups.-bugs +speed
See https://gitter.im/CZ-NIC/knot-resolver?at=592d2fb7f3001cd34270f0cb and followups.https://gitlab.nic.cz/knot/knot-resolver/-/issues/199validate: various failures on 1.2.6 not related to forwarding2017-10-10T09:53:15+02:00Vladimír Čunátvladimir.cunat@nic.czvalidate: various failures on 1.2.6 not related to forwardingThis seems independent of forwarding mode, and it fails on 1.2.6 as well. Example log:
```
[37659][plan] plan 'v1.pcextreme.nl.' type 'DNSKEY'
[60204][iter] 'v1.pcextreme.nl.' type 'DNSKEY' id was assigned, parent id 37659
[60204...This seems independent of forwarding mode, and it fails on 1.2.6 as well. Example log:
```
[37659][plan] plan 'v1.pcextreme.nl.' type 'DNSKEY'
[60204][iter] 'v1.pcextreme.nl.' type 'DNSKEY' id was assigned, parent id 37659
[60204][resl] => querying: '93.180.70.53' score: 10 zone cut: 'v1.pcextreme.nl.' m12n: 'v1.PcExtrEME.nL.' type: 'DNSKEY' proto: 'udp'
[60204][iter] <= rcode: NOERROR
[60204][vldr] <= bad keys, broken trust chain
```
Other resolvers find the domain OK, including [dnsviz](http://dnsviz.net/d/v1.pcextreme.nl/dnssec/), unbound and google.
**EDIT**: this particular name requires GOST for DS, and it's now correctly downgraded to insecure since !333 (and thus v1.3.2).https://gitlab.nic.cz/knot/knot-resolver/-/issues/161Answer to query going through chain of CNAMEs contains duplicate records in A...2017-04-04T10:33:36+02:00Petr ŠpačekAnswer to query going through chain of CNAMEs contains duplicate records in AUTHORITY sectionAnswer to query going through chain of CNAMEs contains duplicate records in `AUTHORITY` section.
Example of such answer:
```
;QUESTION
start.example.com. IN A
;ANSWER
start.example.com. 3600 IN CNAME x.y.z.wc.example.com.
start.example....Answer to query going through chain of CNAMEs contains duplicate records in `AUTHORITY` section.
Example of such answer:
```
;QUESTION
start.example.com. IN A
;ANSWER
start.example.com. 3600 IN CNAME x.y.z.wc.example.com.
start.example.com. 3600 IN RRSIG CNAME 8 3 3600 20121126123316 20121029123316 64050 example.com. LHpx5n++Z0Jgjjalac+e7wdYSbfurqSD pLRAOI1PybTJkwrMvgDKfp0ycT4HwsLV y7spumZ/Ahg/5II9pai7jCiqv1Iyh6fx 19ZVeClTFMOLotCK8xMHACYJIY39BhTw D2D3r9BxbK+RopUlXypwV02yzdY2xEnP CBJVDUn5d0g=
x.y.z.wc.example.com. 3600 IN CNAME x.y.z.end.example.com.
x.y.z.wc.example.com. 3600 IN RRSIG CNAME 8 3 3600 20121126123316 20121029123316 64050 example.com. BCnT6CIuqvF1U9LfiHIovgvXIVFJsCXq QWmnjHtbFvzUlTlfGj+56YBSOEpyCep4 CBJ0CBgZ8gl5kWip8N+sTlveU/UWMv4F AkqLXRYjp4CZegslmJIuXU5uS+Q0GlLb WdSB9ZCZcbbO0qrOtUfrJ2ozcSTCS+D+ oIZ+CkwvDlQ=
x.y.z.end.example.com. 3600 IN A 1.2.3.5
x.y.z.end.example.com. 3600 IN RRSIG A 8 3 3600 20121126123249 20121029123249 64050 example.com. MyXXd3MvXtEYVNqWDepM3+Ra/j/b63Qe hzSHXZe5gL954WxW8KGHPYmeWyhDtruT hpZS6s6jeARY2xt0lmEDnMgNyPJGA6UW wTIgvGD0u9Qw5kocCq3ZH4cSG4xu4rmZ oi+h8OGrHxUb4jIKzipzAQDxhnAcp/wK F7e+p+OE+Fo=
;AUTHORITY
isjq5aarcp8p5sukc56g961cccjus5u2.example.com. 86400 IN NSEC3 1 0 1 abcd isoaarjsq14bkqaamivn1t1milkv95lc A RRSIG
isjq5aarcp8p5sukc56g961cccjus5u2.example.com. 86400 IN RRSIG NSEC3 8 3 86400 20121126123259 20121029123259 64050 example.com. Cxwzq1DUQvhkTVHEJHlb92c511Y+uJy/ C0yL9br6W/5lB/usuSiK2DjW58ibPh2k LH1P3SpGqd1Y7LigptdXoPBDFakcNcim PWCN93R3J80+vrHHPkPyIsBaywwYI3SN GgfnHfPF+wmH+tZ1vfEHbigOxqPFK+T0 ntKq7dkSndg=
a61sejfu6am5a36p628t4s089s309o44.example.com. 86400 IN NSEC3 1 0 1 abcd a64lt5ij9a1up15h5cdsn1u2071901hu A RRSIG
a61sejfu6am5a36p628t4s089s309o44.example.com. 86400 IN RRSIG NSEC3 8 3 86400 20121126123315 20121029123315 64050 example.com. gfBu4oqo9cVxJbqrw2Ly7mK638kGPOF8 l8eh7ovalniwkU3F+PNYJyfSE9yGX8tM GbXrkEW9mAzAh39igr2+Bbzi9WPTRp4R DVM0qw+eyMmQRPWKt7FeanDtP+OcdVp0 Hf2aPzsgmgTdS6s0AboUq1rX53H2M6F8 xAiwPrBJXDQ=
example.com. 3600 IN NS ns.example.com.
example.com. 3600 IN RRSIG NS 8 2 3600 20121126123249 20121029123249 64050 example.com. cpLjgKPacNxVIGo59tYMZ98GVYpH28WH RWj3AeIHK0StYFcAlflGLdkae1LEgMwf UmzrayrA5GMe3AH8LyuTgA2Dn1oNFxGf uShQvK2MFQ+LxvQfiuoqlAlL5Aa94IWc SoU/wLrr66I1K8oSB2yK1Tyyv73c2N40 D1mBbzIE70U=
a61sejfu6am5a36p628t4s089s309o44.example.com. 86400 IN NSEC3 1 0 1 abcd a64lt5ij9a1up15h5cdsn1u2071901hu A RRSIG
a61sejfu6am5a36p628t4s089s309o44.example.com. 86400 IN RRSIG NSEC3 8 3 86400 20121126123315 20121029123315 64050 example.com. gfBu4oqo9cVxJbqrw2Ly7mK638kGPOF8 l8eh7ovalniwkU3F+PNYJyfSE9yGX8tM GbXrkEW9mAzAh39igr2+Bbzi9WPTRp4R DVM0qw+eyMmQRPWKt7FeanDtP+OcdVp0 Hf2aPzsgmgTdS6s0AboUq1rX53H2M6F8 xAiwPrBJXDQ=
example.com. 3600 IN NS ns.example.com.
example.com. 3600 IN RRSIG NS 8 2 3600 20121126123249 20121029123249 64050 example.com. cpLjgKPacNxVIGo59tYMZ98GVYpH28WH RWj3AeIHK0StYFcAlflGLdkae1LEgMwf UmzrayrA5GMe3AH8LyuTgA2Dn1oNFxGf uShQvK2MFQ+LxvQfiuoqlAlL5Aa94IWc SoU/wLrr66I1K8oSB2yK1Tyyv73c2N40 D1mBbzIE70U=
;ADDITIONAL
```
Please note duplicate `example.com. 3600 IN NS ns.example.com.` and associated `RRSIG`/`NSEC3` records.
Reproducer:
- Use kresd b9c99804d0a02cbeec1b5114c4f9875c65a7e5e2
- Use test `sets/resolver/val_nsec3_cnametocnamewctoposwc.rpl` from Deckard@9a70ab63db0ec8a5220b04ab5152ab2215e1206a.
- run test as `rm -f /tmp/pcap && SOCKET_WRAPPER_PCAP_FILE=/tmp/pcap TESTS=sets/resolver/val_nsec3_cnametocnamewctoposwc.rpl MAKEFLAGS="-j1" ./kresd_run.sh`
- check `AUTHORITY` section in the last DNS packet of `/tmp/pcap`
(ignore duplicate packets in the pcap, IMHO this is not caused by `kresd`)https://gitlab.nic.cz/knot/knot-resolver/-/issues/160If an authoritative server returns invalid RRType in the answer, kresd goes a...2017-04-05T12:12:44+02:00Ondřej SurýIf an authoritative server returns invalid RRType in the answer, kresd goes alongGitBook CDN returns A record on any query (now at least limited to A and AAAA), and IPv4 is now fine:
```
ondrej@komorebi:~/Projects/knot-resolver (master)$ dig +dnssec +multi +time=60 +retry=1 -p 50168 @::1 cdn.gitbook.com.
; <<>...GitBook CDN returns A record on any query (now at least limited to A and AAAA), and IPv4 is now fine:
```
ondrej@komorebi:~/Projects/knot-resolver (master)$ dig +dnssec +multi +time=60 +retry=1 -p 50168 @::1 cdn.gitbook.com.
; <<>> DiG 9.10.3-P4-Debian <<>> +dnssec +multi +time=60 +retry=1 -p 50168 @::1 cdn.gitbook.com.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33743
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;cdn.gitbook.com. IN A
;; ANSWER SECTION:
cdn.gitbook.com. 3600 IN A 95.85.1.232
;; Query time: 880 msec
;; SERVER: ::1#50168(::1)
;; WHEN: Mon Feb 20 11:09:56 CET 2017
;; MSG SIZE rcvd: 60
```
But AAAA query returns `A` record which is invalid for this type of query.
```
ondrej@komorebi:~/Projects/knot-resolver (master)$ dig +dnssec +multi +time=60 +retry=1 -p 50168 @::1 IN AAAA cdn.gitbook.com.
; <<>> DiG 9.10.3-P4-Debian <<>> +dnssec +multi +time=60 +retry=1 -p 50168 @::1 IN AAAA cdn.gitbook.com.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55917
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;cdn.gitbook.com. IN AAAA
;; ANSWER SECTION:
cdn.gitbook.com. 3600 IN A 95.85.1.232
;; Query time: 110 msec
;; SERVER: ::1#50168(::1)
;; WHEN: Mon Feb 20 11:11:22 CET 2017
;; MSG SIZE rcvd: 60
```
@pspacek Could you write tests with @sbalazik or @ikrumlova ?1.3.0 releaseIvana KrumlovaIvana Krumlovahttps://gitlab.nic.cz/knot/knot-resolver/-/issues/154predict module can get stuck2017-12-17T01:10:18+01:00Vladimír Čunátvladimir.cunat@nic.czpredict module can get stuckRefs:
- https://lists.nic.cz/pipermail/knot-dns-users/2017-February/001050.html
- https://gitter.im/CZ-NIC/knot-resolver?at=585e7766c895451b751765fdRefs:
- https://lists.nic.cz/pipermail/knot-dns-users/2017-February/001050.html
- https://gitter.im/CZ-NIC/knot-resolver?at=585e7766c895451b751765fd1.3.xhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/151trust anchor bootstrap does not work: [vldr] bad keys, broken trust chain2017-04-05T11:53:40+02:00Petr Špačektrust anchor bootstrap does not work: [vldr] bad keys, broken trust chainSomething weird is when attempting TA bootstrap:
~~~
rm -f *.mdb /tmp/root.keys && kresd -a 127.0.0.1#5353 -v -k /tmp/root.keys
==9656== Memcheck, a memory error detector
==9656== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward ...Something weird is when attempting TA bootstrap:
~~~
rm -f *.mdb /tmp/root.keys && kresd -a 127.0.0.1#5353 -v -k /tmp/root.keys
==9656== Memcheck, a memory error detector
==9656== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==9656== Using Valgrind-3.12.0 and LibVEX; rerun with -h for copyright info
==9656== Command: kresd -a 127.0.0.1#5353 -v -k /tmp/root.keys
==9656==
[ ta ] keyfile '/tmp/root.keys': doesn't exist, bootstrapping
[ ta ] warning: root anchor bootstrapped, you SHOULD check the key manually, see: https://data.iana.org/root-anchors/draft-icann-dnssec-trust-anchor.html#sigs
[system] interactive mode
> [ 0][plan] plan '.' type 'DNSKEY'
[51149][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[51149][resl] => using root hints
[64772][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[64772][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[64772][resl] => querying: '202.12.27.33' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[64772][iter] <= rcode: NOERROR
[64772][vldr] <= bad keys, broken trust chain
[ 0][resl] finished: 8, queries: 0, mempool: 81952 B
[ ta ] active refresh failed, rcode: 2
[ ta ] next refresh: 86400000
[ 0][plan] plan '.' type 'NS'
[23829][iter] '.' type 'NS' id was assigned, parent id 0
[23829][resl] => using root hints
[ 3535][iter] '.' type 'NS' id was assigned, parent id 0
[ 3535][plan] plan '.' type 'DNSKEY'
[34898][iter] '.' type 'DNSKEY' id was assigned, parent id 3535
[34898][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[34898][resl] => querying: '202.12.27.33' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[34898][iter] <= rcode: NOERROR
[34898][vldr] <= bad keys, broken trust chain
[ 0][resl] finished: 8, queries: 0, mempool: 81952 B
~~~
The important (and weird) part seems to be:
~~~
[34898][iter] <= rcode: NOERROR
[34898][vldr] <= bad keys, broken trust chain
~~~
Huh? Is validator running before the bootstrap is finished?
In any case, the bootstrap fails because of this and the `kresd` is returning `SERVFAIL` for all the queries.
Affected version: fd84f602b002936c82414f20f9940ad803eaff371.2.2 patch releaseVladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/150unable to quit() daemon with multiple forks2017-12-17T01:10:18+01:00Petr Špačekunable to quit() daemon with multiple forksWhen running multiple forks, e.g. `kresd -f 2`, calling `quit()` function on one of the the control sockets leads to infinite loop:
~~~
tty1$ kresd -f 2
~~~
~~~
tty2$ echo 'quit()' | socat - unix-client:tty/21894
~~~
~~~
tty1$ kresd -f 2...When running multiple forks, e.g. `kresd -f 2`, calling `quit()` function on one of the the control sockets leads to infinite loop:
~~~
tty1$ kresd -f 2
~~~
~~~
tty2$ echo 'quit()' | socat - unix-client:tty/21894
~~~
~~~
tty1$ kresd -f 2
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
[system] ipc: File exists
...
~~~
One of the processes terminates sucessfully but the other one ends up in infinite loop.
Backtrace from the cycling process:
~~~
#0 0x00007f7073b78c30 in __write_nocancel () at ../sysdeps/unix/syscall-template.S:84
#1 0x00007f7073afba57 in _IO_new_file_write (f=0x7f7073e42500 <_IO_2_1_stderr_>, data=0x7ffccc738460, n=26) at fileops.c:1271
#2 0x00007f7073afc368 in new_do_write (to_do=<optimized out>, data=0x7ffccc738460 "[system] ipc: File exists\n", fp=0x7f7073e42500 <_IO_2_1_stderr_>) at fileops.c:526
#3 _IO_new_file_xsputn (f=0x7f7073e42500 <_IO_2_1_stderr_>, data=<optimized out>, n=26) at fileops.c:1350
#4 0x00007f7073ad1a45 in buffered_vfprintf (s=0x7f7073e42500 <_IO_2_1_stderr_>, format=<optimized out>, args=<optimized out>) at vfprintf.c:2346
#5 0x00007f7073acebf5 in _IO_vfprintf_internal (s=0x7f7073e42500 <_IO_2_1_stderr_>, format=0x558653b144fa "[system] ipc: %s\n", ap=ap@entry=0x7ffccc73a9f8)
at vfprintf.c:1293
#6 0x00007f7073ad7677 in __fprintf (stream=<optimized out>, format=<optimized out>) at fprintf.c:32
#7 0x0000558653b0bf9c in ipc_activity (handle=0x55865560d1e0, status=0, events=1) at daemon/main.c:221
#8 0x00007f7074f84938 in uv.io_poll () from /lib64/libuv.so.1
#9 0x00007f7074f762d4 in uv_run () from /lib64/libuv.so.1
#10 0x0000558653b0c621 in run_worker (loop=0x7f707518f220, engine=0x7ffccc73dfa0, ipc_set=0x7ffccc73e1a0, leader=false, control_fd=-1) at daemon/main.c:367
#11 0x0000558653b0da83 in main (argc=3, argv=0x7ffccc73e568) at daemon/main.c:692
~~~
The problem apparently comes from `ipc_readall()`:
~~~
#0 ipc_readall (fd=10, dst=0x7ffccc73aaf4 "", len=4) at daemon/main.c:169
#1 0x0000558653b0bda4 in ipc_activity (handle=0x55865560d1e0, status=0, events=1) at daemon/main.c:189
#2 0x00007f7074f84938 in uv__io_poll (loop=loop@entry=0x7f707518f220 <default_loop_struct>, timeout=17425) at src/unix/linux-core.c:382
#3 0x00007f7074f762d4 in uv_run (loop=0x7f707518f220 <default_loop_struct>, mode=UV_RUN_DEFAULT) at src/unix/core.c:352
#4 0x0000558653b0c621 in run_worker (loop=0x7f707518f220 <default_loop_struct>, engine=0x7ffccc73dfa0, ipc_set=0x7ffccc73e1a0, leader=false, control_fd=-1)
at daemon/main.c:367
#5 0x0000558653b0da83 in main (argc=3, argv=0x7ffccc73e568) at daemon/main.c:692
~~~
In function `static bool ipc_readall(int fd, char *dst, size_t len)` the `read()` returns `0` but `len` parameter is 4:
~~~
(gdb) frame
#0 ipc_readall (fd=10, dst=0x7ffccc73aaf4 "", len=4) at daemon/main.c:169
(gdb) bt full
#0 ipc_readall (fd=10, dst=0x7ffccc73aaf4 "", len=4) at daemon/main.c:169
rb = 0
#1 0x0000558653b0bda4 in ipc_activity (handle=0x55865560d1e0, status=0, events=1) at daemon/main.c:189
engine = 0x7ffccc73dfa0
fd = 10
len = 0
~~~
Affected version: 1.2.1, c664f0075a4cb62af84b122eaf53a82d520e7299https://gitlab.nic.cz/knot/knot-resolver/-/issues/142Resolution of `726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.w...2017-04-04T10:33:36+02:00Ondřej SurýResolution of `726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com. IN MX` "fails" with NXDOMAINCDNs are broken. This is our most desperate hour. Help me, Obi-Wan Kenobi. You're my only hope.
```
[ 0][plan] plan '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX'
[58623][iter] '726170696...CDNs are broken. This is our most desperate hour. Help me, Obi-Wan Kenobi. You're my only hope.
```
[ 0][plan] plan '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX'
[58623][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[58623][resl] => using root hints
[25279][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[25279][plan] plan '.' type 'DNSKEY'
[60831][iter] '.' type 'DNSKEY' id was assigned, parent id 25279
[60831][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[60831][iter] <= rcode: NOERROR
[60831][vldr] <= parent: updating DNSKEY
[60831][vldr] <= answer valid, OK
[60831][resl] <= server: '2001:dc3::35' rtt: 19 ms
[33422][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[33422][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'coM.' type: 'NS' proto: 'udp'
[33422][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[33422][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[33422][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[33422][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[33422][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[33422][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[33422][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[33422][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[33422][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[33422][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[33422][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[33422][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[33422][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[33422][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[33422][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[33422][iter] <= referral response, follow
[33422][vldr] <= DS: OK
[33422][vldr] <= answer valid, OK
[33422][resl] <= server: '2001:500:9f::42' rtt: 2 ms
[61984][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[61984][plan] plan 'com.' type 'DNSKEY'
[34645][iter] 'com.' type 'DNSKEY' id was assigned, parent id 61984
[34645][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'cOM.' type: 'DNSKEY' proto: 'udp'
[34645][iter] <= rcode: NOERROR
[34645][vldr] <= parent: updating DNSKEY
[34645][vldr] <= answer valid, OK
[34645][resl] <= server: '192.55.83.30' rtt: 34 ms
[38918][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[38918][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'WEbCfs00.cOm.' type: 'NS' proto: 'udp'
[38918][iter] <= using glue for 'ns01.webcfs00.com.': '204.212.170.100'
[38918][iter] <= using glue for 'ns02.webcfs00.com.': '204.212.170.105'
[38918][iter] <= referral response, follow
[38918][vldr] <= DS doesn't exist, going insecure
[38918][vldr] <= answer valid, OK
[38918][resl] <= server: '192.41.162.30' rtt: 116 ms
[65055][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[65055][resl] => querying: '204.212.170.105' score: 10 zone cut: 'webcfs00.com.' m12n: '80Hc70747bE.weBCFS00.cOm.' type: 'NS' proto: 'udp'
[65055][iter] <= rcode: NOERROR
[65055][iter] <= found cut, retrying with non-minimized name
[65055][resl] <= server: '204.212.170.105' rtt: 171 ms
[ 7523][iter] '726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com.' type 'MX' id was assigned, parent id 0
[ 7523][resl] => querying: '204.212.170.100' score: 10 zone cut: 'webcfs00.com.' m12n: '726170696473736c2d63726c.67656f7472757374.636F6d.80Hc70747BE.weBCFS00.com.' type: 'MX' proto: 'udp'
[ 7523][iter] <= rcode: NXDOMAIN
[ 7523][ pc ] => answer cached for TTL=5
[ 7523][resl] <= server: '204.212.170.100' rtt: 179 ms
[ 0][resl] finished: 4, queries: 3, mempool: 164000 B
```
Compare:
```
$ dig +multi +time=60 +retry=1 @204.212.170.100 726170696473736c2d63726C.67656f7472757374.636f6d.80hc70747be.webcfs00.com. IN MX
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 36386
;; Flags: qr aa; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
;; QUESTION SECTION:
;; 726170696473736c2d63726C.67656f7472757374.636f6d.80hc70747be.webcfs00.com. IN MX
;; ANSWER SECTION:
726170696473736c2d63726C.67656f7472757374.636f6d.80hc70747be.webcfs00.com. 84600 IN MX 4144 f.1b0f0000.a.f.726170696473736c2d63726C.67656f7472757374.636f6d.80hc70747be.webcfs00.com.
;; ADDITIONAL SECTION:
f.1b0f0000.a.f.726170696473736c2d63726C.67656f7472757374.636f6d.80hc70747be.webcfs00.com. 84600 IN A 204.212.170.105
;; Received 138 B
;; Time 2017-01-24 13:53:52 CET
;; From 204.212.170.100@53(UDP) in 170.6 ms
```
vs
```
$ dig +dnssec +multi +time=60 +retry=1 @204.212.170.100 726170696473736c2d63726c.67656f7472757374.636f6d.80hc70747be.webcfs00.com. IN MX
;; ERROR: malformed reply packet from 204.212.170.100@53(UDP)
```1.2.2 patch releasehttps://gitlab.nic.cz/knot/knot-resolver/-/issues/141Resolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL2017-08-22T13:33:34+02:00Ondřej SurýResolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
---...```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | bind ^------------------
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | unbound:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | unbound ^------------------
```
```
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 25787
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A
;; Received 72 B
;; Time 2017-01-24 13:48:24 CET
;; From ::1@38267(UDP) in 1719.0 ms
```
clear cache log:
```
[ 0][plan] plan 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A'
[56954][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56954][resl] => using root hints
[44674][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[44674][plan] plan '.' type 'DNSKEY'
[30973][iter] '.' type 'DNSKEY' id was assigned, parent id 44674
[30973][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[30973][iter] <= rcode: NOERROR
[30973][vldr] <= parent: updating DNSKEY
[30973][vldr] <= answer valid, OK
[30973][resl] <= server: '2001:dc3::35' rtt: 18 ms
[29982][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[29982][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[29982][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[29982][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[29982][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[29982][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[29982][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[29982][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[29982][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[29982][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[29982][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[29982][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[29982][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[29982][iter] <= referral response, follow
[29982][vldr] <= DS: OK
[29982][vldr] <= answer valid, OK
[29982][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[22599][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[22599][plan] plan 'com.' type 'DNSKEY'
[ 9678][iter] 'com.' type 'DNSKEY' id was assigned, parent id 22599
[ 9678][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[ 9678][iter] <= rcode: NOERROR
[ 9678][vldr] <= parent: updating DNSKEY
[ 9678][vldr] <= answer valid, OK
[ 9678][resl] <= server: '192.55.83.30' rtt: 34 ms
[49039][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[49039][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'rACkSPACecLouD.cOM.' type: 'NS' proto: 'udp'
[49039][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[49039][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[49039][iter] <= referral response, follow
[49039][vldr] <= DS doesn't exist, going insecure
[49039][vldr] <= answer valid, OK
[49039][resl] <= server: '192.41.162.30' rtt: 115 ms
[51213][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[51213][resl] => querying: '65.61.188.4' score: 10 zone cut: 'rackspacecloud.com.' m12n: 'CLoUDFIleS.RacKsPAcECloUD.cOM.' type: 'NS' proto: 'udp'
[51213][iter] <= referral response, follow
[51213][resl] <= server: '65.61.188.4' rtt: 31 ms
[33844][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[33844][plan] plan 'www-gtm-ord1.rackspace.com.' type 'AAAA'
[62064][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][plan] plan 'm.gtld-servers.net.' type 'AAAA'
[45856][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[45856][resl] => using root hints
[ 4235][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[ 4235][resl] >< TA: '.'
[ 4235][plan] plan '.' type 'DNSKEY'
[33383][iter] '.' type 'DNSKEY' id was assigned, parent id 4235
[33383][ rc ] => satisfied from cache
[33383][iter] <= rcode: NOERROR
[33383][vldr] <= parent: updating DNSKEY
[33383][vldr] <= answer valid, OK
[53600][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[53600][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'NeT.' type: 'NS' proto: 'udp'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[53600][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[53600][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[53600][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[53600][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[53600][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[53600][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[53600][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[53600][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[53600][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[53600][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[53600][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[53600][iter] <= referral response, follow
[53600][vldr] <= DS: OK
[53600][vldr] <= answer valid, OK
[53600][resl] <= server: '2001:7fd::1' rtt: 5 ms
[63179][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[63179][plan] plan 'net.' type 'DNSKEY'
[64080][iter] 'net.' type 'DNSKEY' id was assigned, parent id 63179
[64080][resl] => querying: '192.52.178.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][resl] => querying: '192.48.79.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][iter] <= rcode: NOERROR
[64080][vldr] <= parent: updating DNSKEY
[64080][vldr] <= answer valid, OK
[64080][resl] <= server: '192.52.178.30' rtt: 264 ms
[64080][resl] <= server: '192.48.79.30' rtt: >=14 ms
[43576][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[43576][resl] => querying: '192.43.172.30' score: 10 zone cut: 'net.' m12n: 'gtld-seRVeRs.NeT.' type: 'NS' proto: 'udp'
[43576][iter] <= referral response, follow
[43576][vldr] <= DS doesn't exist, going insecure
[43576][vldr] <= parent: updating DS
[43576][vldr] <= answer valid, OK
[43576][resl] <= server: '192.43.172.30' rtt: 28 ms
[27496][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[27496][plan] plan 'av4.nstld.com.' type 'AAAA'
[27534][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][resl] => querying: '192.54.112.30' score: 10 zone cut: 'com.' m12n: 'nsTLd.COm.' type: 'NS' proto: 'udp'
[22969][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[22969][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[22969][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[22969][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[22969][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[22969][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[22969][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[22969][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[22969][iter] <= referral response, follow
[22969][resl] <= server: '192.54.112.30' rtt: 28 ms
[10652][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[10652][resl] => querying: '2001:500:127::30' score: 10 zone cut: 'nstld.com.' m12n: 'aV4.nSTLd.cOM.' type: 'AAAA' proto: 'udp'
[10652][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[10652][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[10652][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[10652][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[10652][iter] <= rcode: NOERROR
[10652][resl] <= server: '2001:500:127::30' rtt: 19 ms
[61253][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[61253][resl] => querying: '2001:500:127::30' score: 19 zone cut: 'gtld-servers.net.' m12n: 'M.gTld-SERVerS.NEt.' type: 'AAAA' proto: 'udp'
[61253][iter] <= rcode: NOERROR
[61253][ pc ] => answer cached for TTL=900
[61253][resl] <= server: '2001:500:127::30' rtt: 18 ms
[51040][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[51040][plan] plan 'm.gtld-servers.net.' type 'A'
[26418][iter] 'm.gtld-servers.net.' type 'A' id was assigned, parent id 51040
[26418][ rc ] => satisfied from cache
[26418][iter] <= rcode: NOERROR
[26418][vldr] <= cached insecure response, going insecure
[12543][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[12543][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'racKSPaCe.COm.' type: 'NS' proto: 'udp'
[12543][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[12543][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[12543][iter] <= referral response, follow
[12543][resl] <= server: '192.55.83.30' rtt: 34 ms
[60529][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[60529][resl] => querying: '69.20.95.4' score: 10 zone cut: 'rackspace.com.' m12n: 'wWW-gTM-oRD1.raCksPAcE.CoM.' type: 'AAAA' proto: 'udp'
[60529][iter] <= rcode: NOERROR
[60529][ pc ] => answer cached for TTL=300
[60529][resl] <= server: '69.20.95.4' rtt: 107 ms
[56516][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56516][plan] plan 'www-gtm-ord1.rackspace.com.' type 'A'
[ 4871][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][resl] => querying: '65.61.188.4' score: 31 zone cut: 'rackspace.com.' m12n: 'WWw-gtm-OrD1.RAckSPACE.CoM.' type: 'A' proto: 'udp'
[ 3085][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 3085][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 3085][iter] <= rcode: NOERROR
[ 3085][resl] <= server: '65.61.188.4' rtt: 27 ms
[41180][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[41180][resl] => querying: '173.203.44.119' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'cdN2.CLoudfileS.rACkSPacECLoud.com.' type: 'NS' proto: 'udp'
[41180][iter] <= rcode: REFUSED
[41180][resl] <= server: '173.203.44.119' rtt: 121 ms
[52045][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[52045][resl] => querying: '173.203.44.119' score: 221 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.CLOuDfiLes.RacksPAceCloUd.COm.' type: 'A' proto: 'udp'
[52045][iter] <= rcode: REFUSED
[52045][resl] <= server: '173.203.44.119' rtt: 118 ms
[58945][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[58945][resl] => querying: '173.203.44.119' score: 269 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.cLOudFIlEs.RAcKspACecLOUd.CoM.' type: 'A' proto: 'udp'
[58945][iter] <= rcode: REFUSED
[58945][resl] <= server: '173.203.44.119' rtt: 119 ms
[ 1543][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1543][resl] => querying: '173.203.44.119' score: 294 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.CDN2.clOUDfiLeS.RAckSpaCeclOUd.COM.' type: 'A' proto: 'udp'
[ 1543][iter] <= rcode: REFUSED
[ 1543][resl] => server: '173.203.44.119' flagged as 'bad'
[34164][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[34164][resl] => unresolvable NS address, bailing out
[34164][plan] plan 'www-gtm-iad2.rackspace.com.' type 'AAAA'
[ 5083][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][resl] => querying: '65.61.188.4' score: 29 zone cut: 'rackspace.com.' m12n: 'wWw-Gtm-iaD2.RACksPAcE.COM.' type: 'AAAA' proto: 'udp'
[32261][iter] <= rcode: NOERROR
[32261][ pc ] => answer cached for TTL=300
[32261][resl] <= server: '65.61.188.4' rtt: 35 ms
[ 1144][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1144][plan] plan 'www-gtm-iad2.rackspace.com.' type 'A'
[56948][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][resl] => querying: '65.61.188.4' score: 32 zone cut: 'rackspace.com.' m12n: 'WWw-GtM-iAD2.rACKSpACe.coM.' type: 'A' proto: 'udp'
[ 4816][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 4816][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 4816][iter] <= rcode: NOERROR
[ 4816][resl] <= server: '65.61.188.4' rtt: 27 ms
[23391][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[23391][resl] => querying: '207.97.206.40' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.clOUDfiLEs.racKspaceClOuD.COm.' type: 'A' proto: 'udp'
[23391][iter] <= rcode: REFUSED
[23391][resl] <= server: '207.97.206.40' rtt: 107 ms
[15551][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[15551][resl] => querying: '207.97.206.40' score: 207 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.clouDfilES.RAcKSpACEcloUD.CoM.' type: 'A' proto: 'udp'
[15551][iter] <= rcode: REFUSED
[15551][resl] <= server: '207.97.206.40' rtt: 108 ms
[56069][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56069][resl] => querying: '207.97.206.40' score: 257 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.CDN2.ClouDFiles.RaCkspAceCloud.cOM.' type: 'A' proto: 'udp'
[56069][iter] <= rcode: REFUSED
[56069][resl] <= server: '207.97.206.40' rtt: 111 ms
[62422][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[62422][resl] => querying: '207.97.206.40' score: 284 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.ClOuDfIles.RaCkSpaCECLouD.CoM.' type: 'A' proto: 'udp'
[62422][iter] <= rcode: REFUSED
[62422][resl] => server: '207.97.206.40' flagged as 'bad'
[24149][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[24149][resl] => unresolvable NS address, bailing out
[24149][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 12, mempool: 164000 B
```1.2.2 patch releaseIvana KrumlovaIvana Krumlovahttps://gitlab.nic.cz/knot/knot-resolver/-/issues/140Resolution of `p7677.cdngc.net.` fails with SERVFAIL2017-04-05T16:20:17+02:00Ondřej SurýResolution of `p7677.cdngc.net.` fails with SERVFAIL```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 54558
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
...```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 54558
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; Received 44 B
;; Time 2017-01-24 13:45:33 CET
;; From ::1@38267(UDP) in 687.3 ms
```
vs
```
$ dig +dnssec +multi +time=60 +retry=1 @8.8.8.8 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 20458
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; AUTHORITY SECTION:
cdngc.net. 119 IN SOA ns1.cdngc.net. noc.pantherexpress.net. (
2016021700 ; serial
1200 ; refresh
120 ; retry
86400 ; expire
120 ; minimum
)
;; Received 103 B
;; Time 2017-01-24 13:46:05 CET
;; From 8.8.8.8@53(UDP) in 28.8 ms
```
clear cache log:
```
[ 0][plan] plan 'p7677.cdngc.net.' type 'A'
[52139][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[52139][resl] => using root hints
[21123][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[21123][plan] plan '.' type 'DNSKEY'
[63279][iter] '.' type 'DNSKEY' id was assigned, parent id 21123
[63279][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[63279][iter] <= rcode: NOERROR
[63279][vldr] <= parent: updating DNSKEY
[63279][vldr] <= answer valid, OK
[63279][resl] <= server: '2001:dc3::35' rtt: 18 ms
[59716][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[59716][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'net.' type: 'NS' proto: 'udp'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[59716][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[59716][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[59716][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[59716][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[59716][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[59716][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[59716][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[59716][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[59716][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[59716][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[59716][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[59716][iter] <= referral response, follow
[59716][vldr] <= DS: OK
[59716][vldr] <= answer valid, OK
[59716][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[12204][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[12204][plan] plan 'net.' type 'DNSKEY'
[43582][iter] 'net.' type 'DNSKEY' id was assigned, parent id 12204
[43582][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'nET.' type: 'DNSKEY' proto: 'udp'
[43582][iter] <= rcode: NOERROR
[43582][vldr] <= parent: updating DNSKEY
[43582][vldr] <= answer valid, OK
[43582][resl] <= server: '192.55.83.30' rtt: 34 ms
[38328][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38328][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'cdngC.Net.' type: 'NS' proto: 'udp'
[38328][iter] <= referral response, follow
[38328][vldr] <= DS doesn't exist, going insecure
[38328][vldr] <= answer valid, OK
[38328][resl] <= server: '192.41.162.30' rtt: 113 ms
[57075][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[57075][plan] plan 'ns4.panthercdn.com.' type 'AAAA'
[46349][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[46349][resl] => using root hints
[42721][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[42721][resl] >< TA: '.'
[42721][plan] plan '.' type 'DNSKEY'
[54368][iter] '.' type 'DNSKEY' id was assigned, parent id 42721
[54368][ rc ] => satisfied from cache
[54368][iter] <= rcode: NOERROR
[54368][vldr] <= parent: updating DNSKEY
[54368][vldr] <= answer valid, OK
[61820][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[61820][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'CoM.' type: 'NS' proto: 'udp'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[61820][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[61820][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[61820][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[61820][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[61820][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[61820][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[61820][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[61820][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[61820][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[61820][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[61820][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[61820][iter] <= referral response, follow
[61820][vldr] <= DS: OK
[61820][vldr] <= answer valid, OK
[61820][resl] <= server: '2001:7fd::1' rtt: 2 ms
[43817][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[43817][plan] plan 'com.' type 'DNSKEY'
[57985][iter] 'com.' type 'DNSKEY' id was assigned, parent id 43817
[57985][resl] => querying: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][resl] => querying: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][iter] <= rcode: NOERROR
[57985][vldr] <= parent: updating DNSKEY
[57985][vldr] <= answer valid, OK
[57985][resl] <= server: '192.52.178.30' rtt: 267 ms
[57985][resl] <= server: '192.48.79.30' rtt: >=17 ms
[48815][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[48815][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'PANTheRCDn.cOM.' type: 'NS' proto: 'udp'
[48815][iter] <= using glue for 'ns3.panthercdn.com.': '174.35.89.33'
[48815][iter] <= using glue for 'ns4.panthercdn.com.': '174.35.49.33'
[48815][iter] <= referral response, follow
[48815][vldr] <= DS doesn't exist, going insecure
[48815][vldr] <= parent: updating DS
[48815][vldr] <= answer valid, OK
[48815][resl] <= server: '192.55.83.30' rtt: 34 ms
[26282][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[26282][resl] => querying: '174.35.49.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'Ns4.PANtheRCDn.COm.' type: 'AAAA' proto: 'udp'
[26282][iter] <= rcode: NOERROR
[26282][ pc ] => answer cached for TTL=5
[26282][resl] <= server: '174.35.49.33' rtt: 21 ms
[49339][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[49339][plan] plan 'ns4.panthercdn.com.' type 'A'
[51066][iter] 'ns4.panthercdn.com.' type 'A' id was assigned, parent id 49339
[51066][ rc ] => satisfied from cache
[51066][iter] <= rcode: NOERROR
[51066][vldr] <= cached insecure response, going insecure
[24570][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24570][resl] => querying: '174.35.49.33' score: 21 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgc.net.' type: 'A' proto: 'udp'
[24570][iter] <= rcode: REFUSED
[24570][resl] <= server: '174.35.49.33' rtt: 21 ms
[ 9998][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[ 9998][resl] => querying: '174.35.49.33' score: 121 zone cut: 'cdngc.net.' m12n: 'P7677.CDngC.NEt.' type: 'A' proto: 'udp'
[ 9998][iter] <= rcode: REFUSED
[ 9998][resl] <= server: '174.35.49.33' rtt: 21 ms
[40285][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[40285][resl] => querying: '174.35.49.33' score: 171 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgC.neT.' type: 'A' proto: 'udp'
[40285][iter] <= rcode: REFUSED
[40285][resl] <= server: '174.35.49.33' rtt: 20 ms
[56211][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[56211][resl] => querying: '174.35.49.33' score: 195 zone cut: 'cdngc.net.' m12n: 'P7677.CdNGc.NEt.' type: 'A' proto: 'udp'
[56211][iter] <= rcode: REFUSED
[56211][resl] => server: '174.35.49.33' flagged as 'bad'
[23576][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[23576][resl] => unresolvable NS address, bailing out
[23576][plan] plan 'ns3.panthercdn.com.' type 'AAAA'
[29290][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][resl] => querying: '174.35.89.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'nS3.PaNtherCdn.Com.' type: 'AAAA' proto: 'udp'
[48411][iter] <= rcode: NOERROR
[48411][ pc ] => answer cached for TTL=5
[48411][resl] <= server: '174.35.89.33' rtt: 21 ms
[38390][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38390][plan] plan 'ns3.panthercdn.com.' type 'A'
[19349][iter] 'ns3.panthercdn.com.' type 'A' id was assigned, parent id 38390
[19349][ rc ] => satisfied from cache
[19349][iter] <= rcode: NOERROR
[19349][vldr] <= cached insecure response, going insecure
[24405][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24405][resl] => querying: '174.35.89.33' score: 21 zone cut: 'cdngc.net.' m12n: 'p7677.CDnGC.neT.' type: 'A' proto: 'udp'
[24405][iter] <= rcode: REFUSED
[24405][resl] <= server: '174.35.89.33' rtt: 21 ms
[42424][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[42424][resl] => querying: '174.35.89.33' score: 121 zone cut: 'cdngc.net.' m12n: 'p7677.CdNgc.net.' type: 'A' proto: 'udp'
[42424][iter] <= rcode: REFUSED
[42424][resl] <= server: '174.35.89.33' rtt: 20 ms
[33417][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[33417][resl] => querying: '174.35.89.33' score: 170 zone cut: 'cdngc.net.' m12n: 'p7677.CdNGc.net.' type: 'A' proto: 'udp'
[33417][iter] <= rcode: REFUSED
[33417][resl] <= server: '174.35.89.33' rtt: 21 ms
[53032][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[53032][resl] => querying: '174.35.89.33' score: 195 zone cut: 'cdngc.net.' m12n: 'p7677.CDNgC.NeT.' type: 'A' proto: 'udp'
[53032][iter] <= rcode: REFUSED
[53032][resl] => server: '174.35.89.33' flagged as 'bad'
[11267][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[11267][resl] => unresolvable NS address, bailing out
[11267][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B
```1.3.0 releaseVladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/128mcaffee.com CDN records unresolvable2017-04-05T16:20:20+02:00Ondřej Surýmcaffee.com CDN records unresolvableFrom internal testing the `b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. IN A` and similar queries end with `NXDOMAIN` while it should return A record:
```
;; ANSWER SECTION:
b-0.19-23003008.1...From internal testing the `b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. IN A` and similar queries end with `NXDOMAIN` while it should return A record:
```
;; ANSWER SECTION:
b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. 3599 IN A 127.129.0.128
```
I suspect QNAME minimization, but further debugging is needed.
Clean cache log:
```
[ 0][plan] plan 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A'
[12987][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[12987][plan] plan 'm.root-servers.net.' type 'AAAA'
[44827][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[44827][resl] >< TA: '.'
[44827][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'NeT.' type: 'NS' proto: 'udp'
[44827][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[44827][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[44827][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[44827][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[44827][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[44827][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[44827][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[44827][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[44827][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[44827][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[44827][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[44827][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[44827][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[44827][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[44827][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[44827][iter] <= referral response, follow
[44827][vldr] <= DS: OK
[44827][vldr] <= answer valid, OK
[44827][resl] <= server: '2001:7fd::1' rtt: 1 ms
[48044][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[48044][plan] plan 'net.' type 'DNSKEY'
[56890][iter] 'net.' type 'DNSKEY' id was assigned, parent id 48044
[56890][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'NET.' type: 'DNSKEY' proto: 'udp'
[56890][iter] <= rcode: NOERROR
[56890][vldr] <= parent: updating DNSKEY
[56890][vldr] <= answer valid, OK
[56890][resl] <= server: '192.55.83.30' rtt: 34 ms
[19599][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[19599][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'ROOT-sERvERs.NEt.' type: 'NS' proto: 'udp'
[19599][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[19599][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[19599][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[19599][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[19599][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[19599][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[19599][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[19599][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[19599][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[19599][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[19599][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[19599][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[19599][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[19599][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[19599][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[19599][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[19599][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[19599][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[19599][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[19599][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[19599][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[19599][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[19599][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[19599][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[19599][iter] <= referral response, follow
[19599][vldr] <= DS doesn't exist, going insecure
[19599][vldr] <= parent: updating DS
[19599][vldr] <= answer valid, OK
[19599][resl] <= server: '192.41.162.30' rtt: 114 ms
[12188][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[12188][resl] => querying: '202.12.27.33' score: 10 zone cut: 'root-servers.net.' m12n: 'M.ROOT-sErveRS.nEt.' type: 'AAAA' proto: 'udp'
[12188][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[12188][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[12188][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[12188][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[12188][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[12188][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[12188][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[12188][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[12188][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[12188][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[12188][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[12188][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[12188][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[12188][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[12188][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[12188][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[12188][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[12188][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[12188][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[12188][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[12188][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[12188][iter] <= using glue for 'g.root-servers.net.': '2001:500:12::d0d'
[12188][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[12188][iter] <= using glue for 'e.root-servers.net.': '2001:500:a8::e'
[12188][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[12188][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[12188][iter] <= rcode: NOERROR
[12188][resl] <= server: '202.12.27.33' rtt: 18 ms
[20909][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[20909][resl] => querying: '2001:dc3::35' score: 18 zone cut: '.' m12n: 'CoM.' type: 'NS' proto: 'udp'
[20909][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[20909][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[20909][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[20909][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[20909][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[20909][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[20909][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[20909][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[20909][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[20909][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[20909][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[20909][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[20909][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[20909][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[20909][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[20909][iter] <= referral response, follow
[20909][vldr] <= DS: OK
[20909][vldr] <= answer valid, OK
[20909][resl] <= server: '2001:dc3::35' rtt: 17 ms
[35619][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[35619][plan] plan 'com.' type 'DNSKEY'
[18962][iter] 'com.' type 'DNSKEY' id was assigned, parent id 35619
[18962][resl] => querying: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[18962][resl] => querying: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[18962][iter] <= rcode: NOERROR
[18962][vldr] <= parent: updating DNSKEY
[18962][vldr] <= answer valid, OK
[18962][resl] <= server: '192.52.178.30' rtt: 263 ms
[18962][resl] <= server: '192.48.79.30' rtt: >=13 ms
[15171][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[15171][resl] => querying: '192.43.172.30' score: 10 zone cut: 'com.' m12n: 'MCafEE.CoM.' type: 'NS' proto: 'udp'
[15171][iter] <= using glue for 'ns-b.mcafee.com.': '208.69.152.14'
[15171][iter] <= using glue for 'ns-a.mcafee.com.': '216.49.88.14'
[15171][iter] <= referral response, follow
[15171][vldr] <= DS doesn't exist, going insecure
[15171][vldr] <= answer valid, OK
[15171][resl] <= server: '192.43.172.30' rtt: 28 ms
[42744][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[42744][resl] => querying: '208.69.152.14' score: 10 zone cut: 'mcafee.com.' m12n: 'avqs.mcAfee.Com.' type: 'NS' proto: 'udp'
[42744][iter] <= referral response, follow
[42744][resl] <= server: '208.69.152.14' rtt: 129 ms
[ 305][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[ 305][plan] plan 'local.cloud.mcafee.com.' type 'AAAA'
[20082][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[27766][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[27766][resl] => querying: '216.49.88.14' score: 10 zone cut: 'mcafee.com.' m12n: 'CLoud.mcaFee.cOm.' type: 'NS' proto: 'udp'
[27766][iter] <= using glue for 'gs4.mcafee.com.': '161.69.198.250'
[27766][iter] <= using glue for 'gs1.mcafee.com.': '8.18.25.250'
[27766][iter] <= using glue for 'gs2.mcafee.com.': '8.21.161.250'
[27766][iter] <= using glue for 'gs3.mcafee.com.': '161.69.169.250'
[27766][iter] <= referral response, follow
[27766][resl] <= server: '216.49.88.14' rtt: 153 ms
[37049][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[37049][resl] => querying: '161.69.198.250' score: 10 zone cut: 'cloud.mcafee.com.' m12n: 'LOCAl.Cloud.mCafEe.coM.' type: 'AAAA' proto: 'udp'
[37049][resl] => querying: '161.69.169.250' score: 10 zone cut: 'cloud.mcafee.com.' m12n: 'LOCAl.Cloud.mCafEe.coM.' type: 'AAAA' proto: 'udp'
[37049][iter] <= rcode: NOERROR
[37049][ pc ] => answer cached for TTL=5
[37049][resl] <= server: '161.69.198.250' rtt: >=266 ms
[37049][resl] <= server: '161.69.169.250' rtt: 16 ms
[59447][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[59447][plan] plan 'local.cloud.mcafee.com.' type 'A'
[17906][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[26631][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[26631][plan] plan 'gs4.mcafee.com.' type 'AAAA'
[43299][iter] 'gs4.mcafee.com.' type 'AAAA' id was assigned, parent id 26631
[26908][iter] 'gs4.mcafee.com.' type 'AAAA' id was assigned, parent id 26631
[26908][resl] => querying: '208.69.152.14' score: 129 zone cut: 'mcafee.com.' m12n: 'Gs4.mCAFEe.CoM.' type: 'AAAA' proto: 'udp'
[26908][iter] <= rcode: NOERROR
[26908][ pc ] => answer cached for TTL=900
[26908][resl] <= server: '208.69.152.14' rtt: 129 ms
[27931][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[27931][plan] plan 'gs4.mcafee.com.' type 'A'
[ 7894][iter] 'gs4.mcafee.com.' type 'A' id was assigned, parent id 27931
[29665][iter] 'gs4.mcafee.com.' type 'A' id was assigned, parent id 27931
[29665][resl] => querying: '208.69.152.14' score: 129 zone cut: 'mcafee.com.' m12n: 'gs4.mCaFee.COm.' type: 'A' proto: 'udp'
[29665][iter] <= using glue for 'ns-a.mcafee.com.': '216.49.88.14'
[29665][iter] <= using glue for 'ns-b.mcafee.com.': '208.69.152.14'
[29665][iter] <= rcode: NOERROR
[29665][resl] <= server: '208.69.152.14' rtt: 129 ms
[34969][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[34969][resl] => querying: '161.69.198.250' score: 266 zone cut: 'cloud.mcafee.com.' m12n: 'locAL.CloUD.mcafeE.cOm.' type: 'A' proto: 'udp'
[34969][resl] => querying: '161.69.198.250' score: 266 zone cut: 'cloud.mcafee.com.' m12n: 'locAL.CloUD.mcafeE.cOm.' type: 'A' proto: 'udp'
[34969][iter] <= rcode: NOERROR
[34969][resl] <= server: '161.69.198.250' rtt: 264 ms
[ 5991][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[ 5991][resl] => querying: '161.69.165.4' score: 10 zone cut: 'avqs.mcafee.com.' m12n: 'EKZIJnEKVVVG7Gb38QCwUr561B.avqS.MCAFEe.COM.' type: 'NS' proto: 'udp'
[ 5991][iter] <= rcode: NXDOMAIN
[ 5991][iter] <= found cut, retrying with non-minimized name
[ 5991][ pc ] => answer cached for TTL=600
[ 5991][resl] <= server: '161.69.165.4' rtt: 26 ms
[24433][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[24433][resl] => querying: '161.69.165.4' score: 26 zone cut: 'avqs.mcafee.com.' m12n: 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.EkzIjneKVvvg7gB38qcwur561b.AVQs.McaFee.COm.' type: 'A' proto: 'udp'
[24433][iter] <= rcode: NXDOMAIN
[24433][ pc ] => answer cached for TTL=600
[24433][resl] <= server: '161.69.165.4' rtt: 25 ms
[ 0][resl] finished: 4, queries: 8, mempool: 82000 B
```1.3.0 releaseVladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/127Returned TTL in the first answer doesn't honor `cache.min_ttl`2022-12-13T12:57:01+01:00Ondřej SurýReturned TTL in the first answer doesn't honor `cache.min_ttl`This is just a reminder, that the first answer (not from cache) doesn't honor the `cache.min_ttl()` settings. The min_ttl value is stored in the cache correctly, but the non-cached answer TTL is not mangled.This is just a reminder, that the first answer (not from cache) doesn't honor the `cache.min_ttl()` settings. The min_ttl value is stored in the cache correctly, but the non-cached answer TTL is not mangled.Vladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/125policy forward does not skip dead servers2017-07-07T11:35:52+02:00Petr Špačekpolicy forward does not skip dead serversThe `kresd` always tries to contact servers in order specified in configuration and does not preffer the working one:
This happens e.g. in situation where configuration specifies two forwarders in following order:
1. dead address `1...The `kresd` always tries to contact servers in order specified in configuration and does not preffer the working one:
This happens e.g. in situation where configuration specifies two forwarders in following order:
1. dead address `192.0.2.111`
2. working address `192.168.3.1`
Here is log from attempts to resolve various non-cached names:
~~~
[plan] plan 'nonexistent.' type 'NS'
[resl] => querying: '192.0.2.111' score: 1425 zone cut: '.' m12n: 'nonexiSteNT.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 1425 zone cut: '.' m12n: 'nonexiSteNT.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=270 ms
[resl] <= server: '192.168.3.1' rtt: 20 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'sorry-root.' type 'NS'
[resl] => querying: '192.0.2.111' score: 20 zone cut: '.' m12n: 'SoRrY-roOt.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 20 zone cut: '.' m12n: 'SoRrY-roOt.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=172 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'qqq.' type 'NS'
[resl] => querying: '192.0.2.111' score: 20 zone cut: '.' m12n: 'QqQ.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 20 zone cut: '.' m12n: 'QqQ.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=49 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
~~~https://gitlab.nic.cz/knot/knot-resolver/-/issues/58dnssec bug: resolver fails to validate answers2018-11-12T16:15:57+01:00Ondřej Surýdnssec bug: resolver fails to validate answersThis is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rco...This is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[iter] <= rcode: NOERROR
[vldr] <= couldn't validate RRSIGs
```
One of the nameservers for cmu.edu is misconfigured and returns `REFUSED`:
```
$ dig IN A www.cmu.edu @ny-server-03.net.cmu.edu.
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 61298
;; Flags: qr rd; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:04 CEST
;; From 38.96.147.4@53(UDP) in 98.5 ms
```
kresd should try harder and not return `REFUSED`, but retry with different nameservers.
```
$ dig IN A www.cmu.edu @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 60007
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:46 CEST
;; From 127.0.0.1@53(UDP) in 165.3 ms
```
Grigorii DemidovGrigorii Demidov