bind 9.2.4 --new queries take > 4 seconds

[Ozmiroid]

On 5 Nov 2004 15:59:29 -0800, Kevin Layer <kevin.layer at gmail.com> wrote:
> This is on SuSE 9.2, though it happened on 9.1, too.
>    # dig +stats iii.com
[snip]
> >>>;; Query time: 4592 msec
>    ;; SERVER: 67.121.255.169#53(67.121.255.169)
>    ;; WHEN: Fri Nov  5 15:43:48 2004
>    ;; MSG SIZE  rcvd: 141

Odd, I see this also, when I "dig iii.com":

Querying a server that's running BIND 8.4.5 on Tru64, though I don't
know if this is the first time iii.com has been queried on that server
...
;; Query time: 40 msec
;; SERVER: 167.142.225.5#53(167.142.225.5)
;; WHEN: Mon Nov  8 14:34:44 2004
;; MSG SIZE  rcvd: 205

Querying a server that's running BIND 9.2.4 on Solaris 8 ...
;; Query time: 4446 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Nov  8 14:34:59 2004
;; MSG SIZE  rcvd: 157

Second attempt on the BIND 9.2.4 server
;; Query time: 3 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Nov  8 14:46:07 2004
;; MSG SIZE  rcvd: 157

But, when I "dig ballyhoo.org" I get normal results, no delay, on the
first query to the BIND 9.2.4 server. (ballyhoo.org selected at
random. I know my server hasn't queried that for at least 2 weeks,
because I keep query logs.) ...
;; Query time: 87 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Nov  8 14:44:43 2004
;; MSG SIZE  rcvd: 94

On a hunch I also tried "dig @67.121.255.169 ballyhoo.org", though I
don't know if that's the first time it's been queried for that domain
...
;; Query time: 260 msec
;; SERVER: 67.121.255.169#53(67.121.255.169)
;; WHEN: Mon Nov  8 14:53:47 2004
;; MSG SIZE  rcvd: 126

Nothing used for these tests is behind a firewall ... unless it's
iii.com's authoritative nameservers.

-- 
- Ozmiroid