slow non-cached quries

[Mark Andrews]

In message <CAAKgOtgoifGPNEpHtX7++w=CZE1dPxX2DeGQ1PpkZ18dpuFPzA at mail.gmail.com>,
 TMK writes:
> Dears,
> 
> Probably this the thousand time you get these question. but our bind server
> have slow response time for the non-cached entries.
> 
> I have run dig with +trace option and below is the result
> 
> ; <<>> DiG 9.8.0-P2 <<>> @127.0.0.1 www.google.com +trace
> ; (1 server found)
> ;; global options: +cmd
> . 2013 IN NS i.root-servers.net.
> . 2013 IN NS g.root-servers.net.
> . 2013 IN NS l.root-servers.net.
> . 2013 IN NS m.root-servers.net.
> . 2013 IN NS d.root-servers.net.
> . 2013 IN NS b.root-servers.net.
> . 2013 IN NS k.root-servers.net.
> . 2013 IN NS j.root-servers.net.
> . 2013 IN NS c.root-servers.net.
> . 2013 IN NS a.root-servers.net.
> . 2013 IN NS h.root-servers.net.
> . 2013 IN NS e.root-servers.net.
> . 2013 IN NS f.root-servers.net.
> ;; Received 228 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms
> 
> com. 172800 IN NS a.gtld-servers.net.
> com. 172800 IN NS b.gtld-servers.net.
> com. 172800 IN NS c.gtld-servers.net.
> com. 172800 IN NS d.gtld-servers.net.
> com. 172800 IN NS e.gtld-servers.net.
> com. 172800 IN NS f.gtld-servers.net.
> com. 172800 IN NS g.gtld-servers.net.
> com. 172800 IN NS h.gtld-servers.net.
> com. 172800 IN NS i.gtld-servers.net.
> com. 172800 IN NS j.gtld-servers.net.
> com. 172800 IN NS k.gtld-servers.net.
> com. 172800 IN NS l.gtld-servers.net.
> com. 172800 IN NS m.gtld-servers.net.
> ;; Received 492 bytes from 199.7.83.42#53(l.root-servers.net) in 175 ms
> 
> google.com. 172800 IN NS ns2.google.com.
> google.com. 172800 IN NS ns1.google.com.
> google.com. 172800 IN NS ns3.google.com.
> google.com. 172800 IN NS ns4.google.com.
> ;; Received 168 bytes from 192.5.6.30#53(a.gtld-servers.net) in 250 ms
> 
> www.google.com. 604800 IN CNAME www.l.google.com.
> www.l.google.com. 300 IN A 209.85.148.106
> www.l.google.com. 300 IN A 209.85.148.104
> www.l.google.com. 300 IN A 209.85.148.147
> www.l.google.com. 300 IN A 209.85.148.99
> www.l.google.com. 300 IN A 209.85.148.103
> www.l.google.com. 300 IN A 209.85.148.105
> ;; Received 148 bytes from 216.239.34.10#53(ns2.google.com) in 225 ms
> 
> 
> 
> we are running bind version "BIND 9.8.0-P2" on CentOS release 5.6 (Final)
> 
> the process is running as mutlithreaded and consuming total of 60% of cpu
> utilization.
> 
> do we have network issue or performance bottleneck.
> 
> engtmk

To better match what a nameserver does, what does dig +trace +dnssec show?

	dig +dnssec +trace www.google.com

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org