BIND 9.10.0-P2 prefetch problem
Tracy, Tedd C. Contractor
Tedd.C.Tracy at ssa.gov
Tue Jul 15 15:38:03 UTC 2014
I'm having problems querying one particular domain with BIND 9.10.0-P2 if prefetch is enabled. I have been able to duplicate the problem from multiple servers running 9.10.0-P2 with different operating systems but I have not been able to duplicate the problem with any other domains (yet, I'm still trying),
The domain that shows the problem is www.securityplusfcuhb.org<http://www.securityplusfcuhb.org>. It is a CNAME that points to a CNAME that points to an A record:
;; QUESTION SECTION:
;www.securityplusfcuhb.org. IN A
;; ANSWER SECTION:
www.securityplusfcuhb.org. 86399 IN CNAME securityplusfcuhb.flb.intuit.com.
securityplusfcuhb.flb.intuit.com. 30 IN CNAME 03845.olb.prd1.flb.digitalinsight.com.
03845.olb.prd1.flb.digitalinsight.com. 30 IN A 199.102.151.76
As long as no queries are performed at a time that would trigger a prefetch, everything is fine. If a query is performed at a time that does trigger a prefetch, all subsequent queries return NXDOMAIN.
dig @localhost a www.securityplusfcuhb.org
; <<>> DiG 9.10.0-P2 <<>> @localhost a www.securityplusfcuhb.org
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49996
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securityplusfcuhb.org. IN A
;; ANSWER SECTION:
www.securityplusfcuhb.org. 86187 IN CNAME securityplusfcuhb.flb.intuit.com.
;; AUTHORITY SECTION:
flb.intuit.com. 597 IN SOA flbflb-gtm-qydc.intuit.com. hostmaster.flb.intuit.com. 2014022110 10800 3600 604800 86400
Flushing the cache fixes the problem. Disabling prefetch prevents the problem from happening.
Tedd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140715/69a76a71/attachment.html>
More information about the bind-users
mailing list