Can we enable serve-stale parameter in bind

[Prasanna Mathivanan (pmathiva)]

Hi Ondrej,

Thanks for responding.

Issue is not in our NS.

if owner of a different domain NS is not reachable to tackle that kind of situation only.

Say my domain Is example.com and I have set of NS to handle it and am trying to reach simple.com and its NS is not reachable hence the query are failing. If I enable serve-stale and am able to get the record for some moment of time record would be cached in stale entry. And next time when it happens it can serve from stale entry instead of giving SERVFAIL response.

Just wanted to confirm if it’s safe to enable this or do we have any negative impact by enabling this.
Just a general query.

--
Regards,
Prasanna


From: Ondřej Surý <ondrej at isc.org>
Date: Monday, 6 November 2023 at 11:22 AM
To: Prasanna Mathivanan (pmathiva) <pmathiva at cisco.com>
Cc: bind-users at lists.isc.org <bind-users at lists.isc.org>
Subject: Re: Can we enable serve-stale parameter in bind
This is a horrible reason to enable serve-stale. Serve stale is a bandaid. You should increase a resiliency of the architecture - have more nameservers for the domain, make the restarts seamless, etc.

Serve-stale was meant to deal with unexpected outages and not as a workaround for bad engineering in the first place.

Ondřej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.


On 6. 11. 2023, at 3:04, Prasanna Mathivanan (pmathiva) via bind-users <bind-users at lists.isc.org> wrote:

Hi team,

If there is a scenario where NS are not reachable, until its up we can serve from cache.

Enabling serve-stale can help us with this use case, is it safe to enable this parameter and what should be the recommended value set for max-stale-ttl ?

--
Regards,
Prasanna

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20231106/3ba6b5ba/attachment.htm>