resolving www.ecb.europa.eu tages ages

Robert M. Stockmann stock at stokkie.net
Mon Jun 20 15:04:40 UTC 2022 

On Fri, 17 Jun 2022, Matus UHLAR - fantomas wrote:

> Date: Fri, 17 Jun 2022 13:04:51 +0200
> From: Matus UHLAR - fantomas <uhlar at fantomas.sk>
> To: bind-users at lists.isc.org
> Subject: resolving www.ecb.europa.eu tages ages
> 
> Hello,
> 
> I encountered case where resolution of www.ecb.europa.eu takes long time and 
> I can't find out why.
> 
> I'm trying to find the culprit using dig +trace and resolution times change 
> from < 1 second to > 15 seconds, while response times reported by dig say 
> miliseconds.
> 
> multiple runs of dig seem to fix the issue until I clear named cache.
> (which indicated problem is in DNS, but I still have no idea where)
> 
> I'm out od ideas what to search for.
> 
> I have debian 11 with bind version 1:9.16.27-1~deb11u1
> 
> an example dig that took 5 seconds pasted:
> 
> # time dig +trace www.ecb.europa.eu
> 
> ; <<>> DiG 9.16.27-Debian <<>> +trace www.ecb.europa.eu
> ;; global options: +cmd
> .                       194472  IN      NS      m.root-servers.net.
> .                       194472  IN      NS      k.root-servers.net.
> ----//----
> 
> www.ecb.europa.eu.      300     IN      CNAME   www-ecb-europa-eu.ax4z.com.
> ;; Received 86 bytes from 156.154.65.109#53(pdns109.ultradns.net) in 11 ms
> 
> real    0m5.117s
> user    0m0.011s
> sys     0m0.035s
> 
Here's a dig which does RRSIG NSEC records :

[hubble:stock]:(~)$ time dig +trace www.ecb.europa.eu

; <<>> DiG 9.9.9-P6 <<>> +trace www.ecb.europa.eu
;; global options: +cmd
.                       518400  IN      NS      j.root-servers.net.
.                       518400  IN      NS      e.root-servers.net.
.                       518400  IN      NS      b.root-servers.net.
.                       518400  IN      NS      a.root-servers.net.
.                       518400  IN      NS      c.root-servers.net.
.                       518400  IN      NS      g.root-servers.net.
.                       518400  IN      NS      i.root-servers.net.
.                       518400  IN      NS      d.root-servers.net.
.                       518400  IN      NS      h.root-servers.net.
.                       518400  IN      NS      f.root-servers.net.
.                       518400  IN      NS      k.root-servers.net.
.                       518400  IN      NS      l.root-servers.net.
.                       518400  IN      NS      m.root-servers.net.
.                       518400  IN      RRSIG   NS 8 0 518400 20220626170000 20220613160000 47671 . jrgBQZPTZlRoXOe832K5+7SeWQwNqQUdgOChlztTesSGXpg+1GJ5nwJG JIK8bsSHnLXpuzF+AIimRZTu20Ac4cbWkSYoctcsoFgNgMoU2pLVlv0P oQOsBHtLnRZvU/gJByp98PobEAmgnRpD+7vyvnPfZOPw90VQQyARwOC0 w7Y2OHfQ02tbAecoy9qCE+bLnupC02Do9cmF4rlLKj40xI/kzQ22HWVQ v1shssV2KRAbUt0wyaLr9bSAoE1IM+2w4zkYQRckfYFnwzTgzktpAosv AiA2y9xzjh+Ntf6Gkxb6YQhnYDhMTlDBL0Z35Tc4Cu2M52Iu3VV4wsh1 SkeqiQ==
.                       86400   IN      NSEC    aaa. NS SOA RRSIG NSEC DNSKEY
.                       86400   IN      RRSIG   NSEC 8 0 86400 20220626170000 20220613160000 47671 . HilCUKfturSptxpvGPCJV1tGd0NmCvtEoGKVNlaQEZlP1dL6HpQUR+kg p64n2Sk3nk9Y8WhdQJ0xsPRkH/TWpH3LRbUXqqwP/qoQ2aC9BLZO/rt4 7FgNrEy/aCRByrGHA8Em7gaA2RxDoqC3uS7KHrNSK8DSOZ2dfF8L2I8t rZzqpqjs/uylLMNQOKLJJNhOhay8UKr3jecAJvcCaV5gMv1UJn4zo6ZR GmJLm6hsiNp/HS/S9I8BRoCj+NQ62BJSyE4F0mn1QB1pRE5M9NuJXTaU 5WX9Bq3bUecvoHcuBAdqa7kOrzq8VDECjb0J++23EnMsfux+O8kyMOnJ fpOhdg==
;; Received 1324 bytes from 192.168.188.10#53(192.168.188.10) in 0 ms

eu.                     172800  IN      NS      w.dns.eu.
eu.                     172800  IN      NS      x.dns.eu.
eu.                     172800  IN      NS      y.dns.eu.
eu.                     172800  IN      NS      be.dns.eu.
eu.                     172800  IN      NS      si.dns.eu.
eu.                     86400   IN      DS      59479 8 2 5DBAA81BC0BEFE921886D8DA28498D9FD441B457FB0E3642A0B2F981 1C8E15E0
eu.                     86400   IN      RRSIG   DS 8 1 86400 20220703050000 20220620040000 47671 . nUg577Kma/3QCaezj7WTWCB0byXqNkmoxD3rP50mPHRX0C7TP3Ekh2Nm F+vgPK+mvBH2MTem12xDpwN6hbkuUedG8P0Wm/ZvprB9LfPtNg3Xxg01 hWIvgfERChrzw+MJf3RpzVeyhcQdMprYHVXlgSzWs3YPCAFzUqGlFA+L qkx3y6GcpLrb9hoYMLEcvmX1z2h1nbO3/tgUuIClRfdvK5oxYxhFbCr6 AxhFhbiMc7EBJgR+9vSk/yxcavIys0zS+j3l7kntOKdUuzS3QtTPQgvO WFTGgMAjvFV4p7H0uJ2TViiFDyRRiSlKfla6m56ocJNF1M5zl08SC1Zn PTbUMw==
;; Received 687 bytes from 192.58.128.30#53(j.root-servers.net) in 178 ms

europa.eu.              86400   IN      NS      ns1bru.europa.eu.
europa.eu.              86400   IN      NS      ns2bru.europa.eu.
europa.eu.              86400   IN      NS      ns1lux.europa.eu.
europa.eu.              86400   IN      NS      ns4az1.europa.eu.
europa.eu.              86400   IN      NS      ns3bru.europa.eu.
europa.eu.              86400   IN      NS      ns3lux.europa.eu.
europa.eu.              86400   IN      NS      ns2lux.europa.eu.
europa.eu.              86400   IN      NS      ns1.bt.net.
europa.eu.              86400   IN      NS      ns2eu.bt.net.
europa.eu.              86400   IN      DS      14845 8 2 9EF3C28F5B3A3D33756D61715B1BDBDBB07E0555598D30256D1F2B71 95324846
europa.eu.              86400   IN      DS      6250 8 2 0186EEFF28A83D2C950963CEEF2F2070DC0885AC8AD7106B03A9741C 25DC6B82
europa.eu.              86400   IN      RRSIG   DS 8 2 86400 20220623041700 20220616041129 27435 eu. XakdaRA9D2dJc7PciufTV202vD0+QVIjdHl0G9IVkvF/UNEOZCheEJs8 F/+Dv+mVVfVyNTlBpi+gRLmj6RNw6BN1vD4C5TNsniS/s5r//IDJd7p9 Sn7pviz7YgZigyVfI0lFE62tZw5zdotpqKhvtro/Pit/16MvdnmKWjvb u8I=
;; Received 511 bytes from 149.38.1.26#53(be.dns.eu) in 12 ms

ecb.europa.eu.          3600    IN      NS      pdns109.ultradns.biz.
ecb.europa.eu.          3600    IN      NS      pdns109.ultradns.org.
ecb.europa.eu.          3600    IN      NS      ns8.colt.net.
ecb.europa.eu.          3600    IN      NS      pdns109.ultradns.com.
ecb.europa.eu.          3600    IN      NS      ns1.coltnet.at.
ecb.europa.eu.          3600    IN      NS      pdns109.ultradns.net.
ecb.europa.eu.          1800    IN      NSEC    ecdc.europa.eu. NS RRSIG NSEC
ecb.europa.eu.          1800    IN      RRSIG   NSEC 8 3 1800 20220630185934 20220620133219 33483 europa.eu. bMTmiLGWf1qziqD1cjYJDv6CZ3ZVWSFcxkMnekRFNk0d1bf69aiu3emG /eZki0WLJxTHjlcHoVm9bJ5oR6bPgMl1AtIDe9Fk1oTU4gIcLf0a/YoJ jLzH9YXS96C5+uB4jKopHTWrM1nO51f/H28ficlp9DlVADqu6ygIgH0d GYZUgZ0pwk/SZE+okDyVkJQtotI3raslM2y+gg55ouZ5T5B+1CvqUJE5 3y8vEckhdGIIxjaN2bRK+4kJsv0EVQAHIPiAq2GYG/PZ2ALNA7YyyrGF 4nNXqcv8MjY3nuAea878d9K3a5clGs56xAF8Yju16PA/pVH3BEE2K5/7 +l8DwQ==
ecb.europa.eu.          1800    IN      RRSIG   NSEC 8 3 1800 20220714114000 20220620133201 45108 europa.eu. qCsdZP+Q8MawhaEPfG1253VhAE5r5b8avrrYU6Oamk1uyqaRWWCMhAHk MqsWEG2uty5OTjtOjIKw2oVEKRWWob7/61hace4t0/Uu8PjGhtDQaaJD hGAwdFGcFDLx4PngmXQoUf76AulFWrb15avLRUV1w+kRkGAGTT/T9mwP aY61XtBBA9tS9MdFIxfX5UcGa9WfM2ZAqd+L3wByDS7DG9hW2FO+Uoux WBZKs+PxxEszN4cMV7FYzfDu4uGyIUMn4w3iqDe4IKuzTGRpN4TBGZiE L+Y3ZoUhSB3m+H3P2JOwa+zWICFcf5mogU1jms8oJ8X6wcIrOO1AVVRk 888b6w==
;; Received 863 bytes from 147.67.12.2#53(ns1lux.europa.eu) in 18 ms

www.ecb.europa.eu.      300     IN      CNAME   www-ecb-europa-eu.ax4z.com.
;; Received 86 bytes from 156.154.64.109#53(pdns109.ultradns.com) in 25 ms

0.00user 0.00system 0:00.56elapsed 0%CPU (0avgtext+0avgdata 17072maxresident)k
0inputs+0outputs (15major+1204minor)pagefaults 0swaps
[hubble:stock]:(~)$ dig -v
DiG 9.9.9-P6
[hubble:stock]:(~)$ 

-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock at stokkie.net

More information about the bind-users mailing list