AXFR Problems sind Upgrade to 9.16.12

[Ondřej Surý]

Klaus,

I pulled couple of the most important patches into the Ubuntu packages. Could you please try whether the updated package exhibits the same behavior?

Ondřej 
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 11. 3. 2021, at 22:05, Klaus Darilion <klaus.darilion at nic.at> wrote:
> 
> I will - in the meantime: do you have older ppa packages somewhere on archive?
> 
> Thanks
> Klaus
> 
>> -----Ursprüngliche Nachricht-----
>> Von: Ondřej Surý <ondrej at isc.org>
>> Gesendet: Donnerstag, 11. März 2021 21:49
>> An: Klaus Darilion <klaus.darilion at nic.at>
>> Cc: bind-users at lists.isc.org
>> Betreff: Re: AXFR Problems sind Upgrade to 9.16.12
>> 
>> Hi Klaus,
>> 
>> can you please fill a proper issue in the gitlab.isc.org?  We are going to need
>> more details and anonymizing the logs isn’t a good way to go forward. In the
>> GitLab you can make the issue confidential and we will sanitize any user data
>> before making it public.
>> 
>> Thanks,
>> Ondrej
>> --
>> Ondřej Surý (He/Him)
>> ondrej at isc.org
>> 
>>>> On 11. 3. 2021, at 21:24, Klaus Darilion <klaus.darilion at nic.at> wrote:
>>> 
>>> Hello!
>>> 
>>> Our setup: Customer Primary --> bind-1 --> bind-2 --> public secondaries
>> (NSD/bind)
>>> 
>>> Today we upgraded bind-1 and bind-2 from:
>>> 9.16.6-3+ubuntu18.04.1+isc+3   --->   9.16.12-2+ubuntu18.04.1+isc+1
>>> 
>>> AXFR from customer to bind-1 still works. But since the upgrade, bind-2 can
>> not transfer the zone from bind-1 anymore:
>>> 
>>> bind-1[3591]: client @0x7f6090274c78 xx.xx.xx.20#42767/key rcode0-
>> internal (example): transfer of 'example/IN': send: operation canceled
>>> bind2[4699]: transfer of 'example/IN' from xx.xx.xx.22#53: failed while
>> receiving responses: end of file
>>> bind2[4699]: transfer of 'example/IN' from xx.xx.xx.22#53: Transfer status:
>> end of file
>>> bind2[4699]: transfer of 'example/IN' from xx.xx.xx.22#53: Transfer
>> completed: 25079 messages, 9787583 records, 334058940 bytes, 30.171 secs
>> (11072186 bytes/sec) (serial 1069865757)
>>> 
>>> I tried "dig axfr @bind-1 ..." which also fails:
>>> ;; communications error to xx.xx.xx.22#53: end of file
>>> 
>>> Same with kdig:
>>> ;; WARNING: can't connect to 83.136.34.24 at 53(TCP)
>>> ;; ERROR: failed to query server 83.136.34.24 at 53(TCP)
>>> 
>>> The AXFR fails after receiving ~ 400MB. The full zone would be ~600MB.
>>> 
>>> Of course also AXFR from bind-2 to our public secondaries fail to. So I
>> suspect this is problem on the "sending" side of bind9. As it worked without
>> problem until the upgrade I think this is a regression.
>>> 
>>> Are there any known issues with 9.16.12?
>>> Do you provide old PPA packages so that we can downgrade?
>>> 
>>> Thanks
>>> Klaus
>>> 
>>> _______________________________________________
>>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>> 
>>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>> 
>>> 
>>> bind-users mailing list
>>> bind-users at lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
>