Upgrade challenges

[Castricum, Ben (W&O SO OPS NET Netwerk beheer)]

Hi,

Like all brave people I am trying to upgrade our nameservers. At the
first attempt to upgrade to 9.4.2-P1 we ran into the "too many
filedescriptors". We recompiled it with changing FD_SETSIZE to 4096.
This of course slowed resolving too much and still did not resolve this
message.

I just gave 9.4.3b2 a try while setting FD_SETSIZE to 32768. First
attempt resulted in

named[599]: main.c:502: unexpected error:
named[599]: isc_socketmgr_create() failed: file not found
named[599]: create_managers() failed: unexpected error
named[599]: exiting (due to early fatal error)

but this was caused by /dev/poll not available in the chrooted
environment (at least we know it uses poll as API). After creating this
device, bind seems to start correctly. However after a few seconds the
logfile gets flooded with "*** POKED TIMER ***" messages, several
thousands per second.

Now I feel myself postitioned in a dead end. We run a very busy
nameserver and are anxious to fix this security problem. I am looking
for suggestions on how to proceed.

Thanks,
Ben