BIND 9.4.x and max-clients-per-query

JINMEI Tatuya / 神明達哉 Jinmei_Tatuya at isc.org
Thu Sep 25 00:16:00 UTC 2008


At Mon, 22 Sep 2008 07:24:02 +0100,
Jan Arild Lindstrøm <jal at telenor.net> wrote:

> >Second, limiting max-clients-per-query doesn't help reduce the number
> >of recursive clients if the same query is sent from different IP
> >addresses.
> 
> Auch! Is that really correct?  Should it not then be called "max-queries-per-client" and
> not "max-clients-per-query"?  

Oops, I was wrong.  I was confused about the case where a single (or
multiple) client keeps sending a high volume of different bogus
queries (for which max-clients-per-query doesn't help).

I now see the problem.  It's really strange to have more than 10,000
recursive clients for the same query while max-clients-per-query is
100.  I have no specific idea about how this could happen, but I'd
suspect this may be a thread-related bug.  Is it possible to rebuild
named without threads and see if the same problem happens?

---
JINMEI, Tatuya
Internet Systems Consortium, Inc.


More information about the bind-users mailing list