Questions about DNS performance

Joaquin J. Domens jdomens at corp.terra.es
Tue Feb 18 16:49:53 UTC 2003 

Thanks for all your feedback guys, I think we should add more memory or
more boxes under the LB.
Traffic seems pretty normal for me .

Thanks for all your responses.

Here is some of the snoop output, it looks normal to me .....

Cheers


________________________________
220.Red-80-32-31.pooles.rima-tde.net -> tpdns2.terra.es ETHER Type=3D0800 (=
IP), size =3D 84 bytes
220.Red-80-32-31.pooles.rima-tde.net -> tpdns2.terra.es IP  D=3D195.235.96.=
90 S=3D80.32.31.220 LEN=3D70, ID=3D48077
220.Red-80-32-31.pooles.rima-tde.net -> tpdns2.terra.es UDP D=3D53 S=3D2106=
 LEN=3D50
220.Red-80-32-31.pooles.rima-tde.net -> tpdns2.terra.es DNS C nowhere.180so=
lutions.com. Internet Addr ?
________________________________
213-97-177-152.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP),=
 size =3D 87 bytes
213-97-177-152.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.97.177.152 LEN=3D73, ID=3D35788
213-97-177-152.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1028 LEN=
=3D53
213-97-177-152.uc.nombres.ttd.es -> tpdns2.terra.es DNS C 166.191.84.217.in=
-addr.arpa. Internet PTR ?
________________________________
213-96-34-50.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 70 bytes
213-96-34-50.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.96.34.50 LEN=3D56, ID=3D28669
213-96-34-50.uc.nombres.ttd.es -> tpdns2.terra.es ICMP Destination unreacha=
ble (UDP port 32619 unreachable)
________________________________
217-126-236-228.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP)=
, size =3D 80 bytes
217-126-236-228.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 =
S=3D217.126.236.228 LEN=3D66, ID=3D22784
217-126-236-228.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D52295 L=
EN=3D46
217-126-236-228.uc.nombres.ttd.es -> tpdns2.terra.es DNS C ALFIC.xtc. Inter=
net Addr ?
________________________________
213-96-52-60.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 85 bytes
213-96-52-60.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.96.52.60 LEN=3D71, ID=3D48621
213-96-52-60.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D60821 LEN=
=3D51
213-96-52-60.uc.nombres.ttd.es -> tpdns2.terra.es DNS C 22.0.168.192.in-add=
r.arpa. Internet PTR ?
________________________________
88.Red-80-36-145.pooles.rima-tde.net -> tpdns2.terra.es ETHER Type=3D0800 (=
IP), size =3D 76 bytes
88.Red-80-36-145.pooles.rima-tde.net -> tpdns2.terra.es IP  D=3D195.235.96.=
90 S=3D80.36.145.88 LEN=3D62, ID=3D482
88.Red-80-36-145.pooles.rima-tde.net -> tpdns2.terra.es UDP D=3D53 S=3D1238=
 LEN=3D42
88.Red-80-36-145.pooles.rima-tde.net -> tpdns2.terra.es DNS C jbns2.cydoor.=
com. Internet Addr ?
________________________________
80-24-242-156.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 77 bytes
80-24-242-156.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D80.24.242.156 LEN=3D63, ID=3D10694
80-24-242-156.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1026 LEN=
=3D43
80-24-242-156.uc.nombres.ttd.es -> tpdns2.terra.es DNS C usuarios.lycos.es.=
 Internet Addr ?
________________________________
213-97-62-43.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 76 bytes
213-97-62-43.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.97.62.43 LEN=3D62, ID=3D10208
213-97-62-43.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D62758 LEN=
=3D42
213-97-62-43.uc.nombres.ttd.es -> tpdns2.terra.es DNS C WWW.GUSTAVO.COM. In=
ternet Addr ?
________________________________
ns1.left-coast.net -> tpdns2.terra.es ETHER Type=3D0800 (IP), size =3D 187 =
bytes
ns1.left-coast.net -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D204.50.24.2=
 LEN=3D173, ID=3D24194
ns1.left-coast.net -> tpdns2.terra.es UDP D=3D62666 S=3D53 LEN=3D153
ns1.left-coast.net -> tpdns2.terra.es DNS R www.gsarchives.com. Internet Ad=
dr 204.50.24.208
________________________________
80-26-110-46.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 79 bytes
80-26-110-46.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D80.26.110.46 LEN=3D65, ID=3D19968
80-26-110-46.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D61653 LEN=
=3D45
80-26-110-46.uc.nombres.ttd.es -> tpdns2.terra.es DNS C www.cybersitter.com.=
 Internet Addr ?
________________________________
213-98-25-147.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 82 bytes
213-98-25-147.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.98.25.147 LEN=3D68, ID=3D16198
213-98-25-147.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D60767 LEN=
=3D48
213-98-25-147.uc.nombres.ttd.es -> tpdns2.terra.es DNS C ortolandia3.homeip.=
net. Internet Addr ?
________________________________
cmr-213-141-47-27.telecable.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 94 bytes
cmr-213-141-47-27.telecable.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.141.47.27 LEN=3D80, ID=3D29214
cmr-213-141-47-27.telecable.es -> tpdns2.terra.es UDP D=3D53 S=3D65089 LEN=
=3D60
cmr-213-141-47-27.telecable.es -> tpdns2.terra.es DNS C AMBROSIO.WOLTEK.loc=
al.WOLTEK.local. Internet Addr ?
________________________________
dopamine.4ph.com -> tpdns2.terra.es ETHER Type=3D0800 (IP), size =3D 70 byt=
es
dopamine.4ph.com -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D66.197.0.33 L=
EN=3D56, ID=3D32873
dopamine.4ph.com -> tpdns2.terra.es ICMP Destination unreachable (Host 66.1=
97.11.159 unreachable)
________________________________
213-98-148-3.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 86 bytes
213-98-148-3.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.98.148.3 LEN=3D72, ID=3D279
213-98-148-3.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1061 LEN=
=3D52
213-98-148-3.uc.nombres.ttd.es -> tpdns2.terra.es DNS C 210.130.4.213.in-ad=
dr.arpa. Internet PTR ?
________________________________
eu181-244.clientes.euskaltel.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 77 bytes
eu181-244.clientes.euskaltel.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D212.142.181.244 LEN=3D63, ID=3D60966
eu181-244.clientes.euskaltel.es -> tpdns2.terra.es UDP D=3D53 S=3D31964 LEN=
=3D43
eu181-244.clientes.euskaltel.es -> tpdns2.terra.es DNS C goeke.net.megavia.=
 Internet Addr ?
________________________________
213-98-84-165.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 78 bytes
213-98-84-165.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.98.84.165 LEN=3D64, ID=3D43626
213-98-84-165.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D6409 LEN=
=3D44
213-98-84-165.uc.nombres.ttd.es -> tpdns2.terra.es DNS C A.GTLD-SERVERS.NET.=
 Internet Addr ?
________________________________
176.Red-80-32-94.pooles.rima-tde.net -> tpdns2.terra.es ETHER Type=3D0800 (=
IP), size =3D 69 bytes
176.Red-80-32-94.pooles.rima-tde.net -> tpdns2.terra.es IP  D=3D195.235.96.=
90 S=3D80.32.94.176 LEN=3D55, ID=3D43797
176.Red-80-32-94.pooles.rima-tde.net -> tpdns2.terra.es UDP D=3D53 S=3D6117=
2 LEN=3D35
176.Red-80-32-94.pooles.rima-tde.net -> tpdns2.terra.es DNS C TOPWAYXXX. In=
ternet SOA ?
________________________________
213-97-14-190.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 86 bytes
213-97-14-190.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.97.14.190 LEN=3D72, ID=3D58112
213-97-14-190.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1030 LEN=
=3D52
213-97-14-190.uc.nombres.ttd.es -> tpdns2.terra.es DNS C www.www.elcallejon.=
com.com. Internet Addr ?
________________________________
217-125-105-199.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP)=
, size =3D 75 bytes
217-125-105-199.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 =
S=3D217.125.105.199 LEN=3D61, ID=3D170
217-125-105-199.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1049 LE=
N=3D41
217-125-105-199.uc.nombres.ttd.es -> tpdns2.terra.es DNS C gooey.yahoo.com.=
 Internet Addr ?
________________________________
80-25-33-90.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), si=
ze =3D 83 bytes
80-25-33-90.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D=
80.25.33.90 LEN=3D69, ID=3D3884
80-25-33-90.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D44078 LEN=
=3D49
80-25-33-90.uc.nombres.ttd.es -> tpdns2.terra.es DNS C gallys.nastydollars.=
com. Internet Addr ?
________________________________
213-96-130-190.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP),=
 size =3D 70 bytes
213-96-130-190.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.96.130.190 LEN=3D56, ID=3D0
213-96-130-190.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D62894 LE=
N=3D36
213-96-130-190.uc.nombres.ttd.es -> tpdns2.terra.es DNS C i.imdb.com. Inter=
net Addr ?
________________________________
181.Red-80-35-205.pooles.rima-tde.net -> tpdns2.terra.es ETHER Type=3D0800 =
(IP), size =3D 83 bytes
181.Red-80-35-205.pooles.rima-tde.net -> tpdns2.terra.es IP  D=3D195.235.96.=
90 S=3D80.35.205.181 LEN=3D69, ID=3D1104
181.Red-80-35-205.pooles.rima-tde.net -> tpdns2.terra.es UDP D=3D53 S=3D104=
1 LEN=3D49
181.Red-80-35-205.pooles.rima-tde.net -> tpdns2.terra.es DNS C msnialogin.p=
assport.com. Internet Addr ?
________________________________
ns2.xs4all.nl -> tpdns2.terra.es ETHER Type=3D0800 (IP), size =3D 205 bytes
ns2.xs4all.nl -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D194.109.9.99 LEN=
=3D191, ID=3D21365
ns2.xs4all.nl -> tpdns2.terra.es UDP D=3D62666 S=3D53 LEN=3D171
ns2.xs4all.nl -> tpdns2.terra.es DNS R 4.142.126.80.in-addr.arpa. Internet =
PTR a80-126-142-4.adsl.xs4all.nl.
________________________________
217-125-31-254.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP),=
 size =3D 71 bytes
217-125-31-254.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D217.125.31.254 LEN=3D57, ID=3D2055
217-125-31-254.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D60005 LE=
N=3D37
217-125-31-254.uc.nombres.ttd.es -> tpdns2.terra.es DNS C i.a.cnn.net. Inte=
rnet Addr ?
________________________________
213-4-15-216.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), s=
ize =3D 82 bytes
213-4-15-216.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D213.4.15.216 LEN=3D68, ID=3D1430
213-4-15-216.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1067 LEN=
=3D48
213-4-15-216.uc.nombres.ttd.es -> tpdns2.terra.es DNS C counter46.bravenet.=
com. Internet Addr ?
________________________________
39.Red-80-38-56.pooles.rima-tde.net -> tpdns2.terra.es ETHER Type=3D0800 (I=
P), size =3D 85 bytes
39.Red-80-38-56.pooles.rima-tde.net -> tpdns2.terra.es IP  D=3D195.235.96.9=
0 S=3D80.38.56.39 LEN=3D71, ID=3D28472
39.Red-80-38-56.pooles.rima-tde.net -> tpdns2.terra.es UDP D=3D53 S=3D2342 =
LEN=3D51
39.Red-80-38-56.pooles.rima-tde.net -> tpdns2.terra.es DNS C spain.img.real=
networks.de. Internet Addr ?
________________________________
  www.usu.ru -> tpdns2.terra.es ETHER Type=3D0800 (IP), size =3D 115 bytes
  www.usu.ru -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D194.226.255.190 L=
EN=3D101, ID=3D54274
  www.usu.ru -> tpdns2.terra.es ICMP Destination unreachable (UDP port 53 u=
nreachable)
________________________________
80-25-154-244.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP), =
size =3D 88 bytes
80-25-154-244.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 S=
=3D80.25.154.244 LEN=3D74, ID=3D6585
80-25-154-244.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D51032 LEN=
=3D54
80-25-154-244.uc.nombres.ttd.es -> tpdns2.terra.es DNS C mayer-acebee781.BO=
SQUE.local. Internet Addr ?
________________________________
193-153-211-253.uc.nombres.ttd.es -> tpdns2.terra.es ETHER Type=3D0800 (IP)=
, size =3D 135 bytes
193-153-211-253.uc.nombres.ttd.es -> tpdns2.terra.es IP  D=3D195.235.96.90 =
S=3D193.153.211.253 LEN=3D121, ID=3D1160
193-153-211-253.uc.nombres.ttd.es -> tpdns2.terra.es UDP D=3D53 S=3D1170 LE=
N=3D101
193-153-211-253.uc.nombres.ttd.es -> tpdns2.terra.es DNS C _ldap._tcp.Nombr=
e-predeterminado-primer-sitio._sites.dc._msdcs.VESTEL.LOCAL. Internet Unkno=
wn (33) ?
^C________________________________
193.68.35.133 -> tpdns2.terra.es ETHER Type=3D0800 (IP), size =3D 136 bytes
193.68.35.133 -> tpdns2.terra.es IP  D=3D195.235.96.90 S=3D193.68.35.133 LE=
N=3D122, ID=3D21727
193.68.35.133 -> tpdns2.terra.es UDP D=3D62666 S=3D53 LEN=3D102
193.68.35.133 -> tpdns2.terra.es DNS R  Error: 3(Name Error)
********************

> According to Joaquin J. Domens:
> > What do you mean by this ?
> > Do it looks normal with the outputs I gave you ?
> > I mean with this statistics, is it normal to have a 60% CPU usage?
> > The servers have configured just the normal zones
> > 127.0.0
> > localhost
> > and the root cache
>=20
> I think what Simon was suggesting is to look at the queries your servers
> are performing, not at the estabilished connections or such.
>=20
> You can toggle the querylogging with 'rndc querylog' which will result in
> bind dumping all queries via syslog. You can then check which queries are
> performed continiously and go further from there.
>=20
> Furthermore it might be smart to make your caching servers stealth second=
aries
> for your own (primary) domain. So clients requesting an address within yo=
ur
> own domain will be answered authoritatively without consulting the 'known=
'
> authoritative nameservers. Depending on the mix of queries performed, thi=
s
> may result in significant performance gain.
>=20
> -Ed

--
--------------------------------------------------
Joaquin J. Domens
=C1rea de Tecnolog=EDa
Departamento de Producci=F3n / Aplicaciones
--------------------------------------------------
Terra Networks Espa=F1a S.A.
Via dos Castillas 7, Pozuelo de Alarc=F3n
Madrid, Espa=F1a
Tel. (34) 91-452-33-71
joaquin.domens at corp.terra.es
--------------------------------------------------
Mercado Continuo: TRR |  Nasdaq: TRLY
--------------------------------------------------
http://www.terra.es
--------------------------------------------------

More information about the bind-users mailing list