BIND 9.10.0-P2 prefetch problem

Tracy, Tedd C. Contractor Tedd.C.Tracy at ssa.gov
Tue Jul 15 15:38:03 UTC 2014


I'm having problems querying one particular domain with BIND 9.10.0-P2 if prefetch is enabled. I have been able to duplicate the problem from multiple servers running 9.10.0-P2 with different operating systems but I have not been able to duplicate the problem with any other domains (yet, I'm still trying),

The domain that shows the problem is www.securityplusfcuhb.org<http://www.securityplusfcuhb.org>. It is a CNAME that points to a CNAME that points to an A record:
;; QUESTION SECTION:
;www.securityplusfcuhb.org.     IN      A

;; ANSWER SECTION:
www.securityplusfcuhb.org. 86399 IN     CNAME   securityplusfcuhb.flb.intuit.com.
securityplusfcuhb.flb.intuit.com. 30 IN CNAME   03845.olb.prd1.flb.digitalinsight.com.
03845.olb.prd1.flb.digitalinsight.com. 30 IN A  199.102.151.76

As long as no queries are performed at a time that would trigger a prefetch, everything is fine. If a query is performed at a time that does trigger a prefetch, all subsequent queries return NXDOMAIN.
dig @localhost a www.securityplusfcuhb.org

; <<>> DiG 9.10.0-P2 <<>> @localhost a www.securityplusfcuhb.org
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49996
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securityplusfcuhb.org.     IN      A

;; ANSWER SECTION:
www.securityplusfcuhb.org. 86187 IN     CNAME   securityplusfcuhb.flb.intuit.com.

;; AUTHORITY SECTION:
flb.intuit.com.         597     IN      SOA     flbflb-gtm-qydc.intuit.com. hostmaster.flb.intuit.com. 2014022110 10800 3600 604800 86400

Flushing the cache fixes the problem. Disabling prefetch prevents the problem from happening.


Tedd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140715/69a76a71/attachment.html>


More information about the bind-users mailing list