On Fri, 17 Jun 2022, Matus UHLAR - fantomas wrote: > Date: Fri, 17 Jun 2022 13:04:51 +0200 > From: Matus UHLAR - fantomas <uh...@fantomas.sk> > To: bind-users@lists.isc.org > Subject: resolving www.ecb.europa.eu tages ages > > Hello, > > I encountered case where resolution of www.ecb.europa.eu takes long time and > I can't find out why. > > I'm trying to find the culprit using dig +trace and resolution times change > from < 1 second to > 15 seconds, while response times reported by dig say > miliseconds. > > multiple runs of dig seem to fix the issue until I clear named cache. > (which indicated problem is in DNS, but I still have no idea where) > > I'm out od ideas what to search for. > > I have debian 11 with bind version 1:9.16.27-1~deb11u1 > > an example dig that took 5 seconds pasted: > > # time dig +trace www.ecb.europa.eu > > ; <<>> DiG 9.16.27-Debian <<>> +trace www.ecb.europa.eu > ;; global options: +cmd > . 194472 IN NS m.root-servers.net. > . 194472 IN NS k.root-servers.net. > ----//---- > > www.ecb.europa.eu. 300 IN CNAME www-ecb-europa-eu.ax4z.com. > ;; Received 86 bytes from 156.154.65.109#53(pdns109.ultradns.net) in 11 ms > > real 0m5.117s > user 0m0.011s > sys 0m0.035s > Here's a dig which does RRSIG NSEC records :
[hubble:stock]:(~)$ time dig +trace www.ecb.europa.eu ; <<>> DiG 9.9.9-P6 <<>> +trace www.ecb.europa.eu ;; global options: +cmd . 518400 IN NS j.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS c.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS d.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS f.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS m.root-servers.net. . 518400 IN RRSIG NS 8 0 518400 20220626170000 20220613160000 47671 . jrgBQZPTZlRoXOe832K5+7SeWQwNqQUdgOChlztTesSGXpg+1GJ5nwJG JIK8bsSHnLXpuzF+AIimRZTu20Ac4cbWkSYoctcsoFgNgMoU2pLVlv0P oQOsBHtLnRZvU/gJByp98PobEAmgnRpD+7vyvnPfZOPw90VQQyARwOC0 w7Y2OHfQ02tbAecoy9qCE+bLnupC02Do9cmF4rlLKj40xI/kzQ22HWVQ v1shssV2KRAbUt0wyaLr9bSAoE1IM+2w4zkYQRckfYFnwzTgzktpAosv AiA2y9xzjh+Ntf6Gkxb6YQhnYDhMTlDBL0Z35Tc4Cu2M52Iu3VV4wsh1 SkeqiQ== . 86400 IN NSEC aaa. NS SOA RRSIG NSEC DNSKEY . 86400 IN RRSIG NSEC 8 0 86400 20220626170000 20220613160000 47671 . HilCUKfturSptxpvGPCJV1tGd0NmCvtEoGKVNlaQEZlP1dL6HpQUR+kg p64n2Sk3nk9Y8WhdQJ0xsPRkH/TWpH3LRbUXqqwP/qoQ2aC9BLZO/rt4 7FgNrEy/aCRByrGHA8Em7gaA2RxDoqC3uS7KHrNSK8DSOZ2dfF8L2I8t rZzqpqjs/uylLMNQOKLJJNhOhay8UKr3jecAJvcCaV5gMv1UJn4zo6ZR GmJLm6hsiNp/HS/S9I8BRoCj+NQ62BJSyE4F0mn1QB1pRE5M9NuJXTaU 5WX9Bq3bUecvoHcuBAdqa7kOrzq8VDECjb0J++23EnMsfux+O8kyMOnJ fpOhdg== ;; Received 1324 bytes from 192.168.188.10#53(192.168.188.10) in 0 ms eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS 59479 8 2 5DBAA81BC0BEFE921886D8DA28498D9FD441B457FB0E3642A0B2F981 1C8E15E0 eu. 86400 IN RRSIG DS 8 1 86400 20220703050000 20220620040000 47671 . nUg577Kma/3QCaezj7WTWCB0byXqNkmoxD3rP50mPHRX0C7TP3Ekh2Nm F+vgPK+mvBH2MTem12xDpwN6hbkuUedG8P0Wm/ZvprB9LfPtNg3Xxg01 hWIvgfERChrzw+MJf3RpzVeyhcQdMprYHVXlgSzWs3YPCAFzUqGlFA+L qkx3y6GcpLrb9hoYMLEcvmX1z2h1nbO3/tgUuIClRfdvK5oxYxhFbCr6 AxhFhbiMc7EBJgR+9vSk/yxcavIys0zS+j3l7kntOKdUuzS3QtTPQgvO WFTGgMAjvFV4p7H0uJ2TViiFDyRRiSlKfla6m56ocJNF1M5zl08SC1Zn PTbUMw== ;; Received 687 bytes from 192.58.128.30#53(j.root-servers.net) in 178 ms europa.eu. 86400 IN NS ns1bru.europa.eu. europa.eu. 86400 IN NS ns2bru.europa.eu. europa.eu. 86400 IN NS ns1lux.europa.eu. europa.eu. 86400 IN NS ns4az1.europa.eu. europa.eu. 86400 IN NS ns3bru.europa.eu. europa.eu. 86400 IN NS ns3lux.europa.eu. europa.eu. 86400 IN NS ns2lux.europa.eu. europa.eu. 86400 IN NS ns1.bt.net. europa.eu. 86400 IN NS ns2eu.bt.net. europa.eu. 86400 IN DS 14845 8 2 9EF3C28F5B3A3D33756D61715B1BDBDBB07E0555598D30256D1F2B71 95324846 europa.eu. 86400 IN DS 6250 8 2 0186EEFF28A83D2C950963CEEF2F2070DC0885AC8AD7106B03A9741C 25DC6B82 europa.eu. 86400 IN RRSIG DS 8 2 86400 20220623041700 20220616041129 27435 eu. XakdaRA9D2dJc7PciufTV202vD0+QVIjdHl0G9IVkvF/UNEOZCheEJs8 F/+Dv+mVVfVyNTlBpi+gRLmj6RNw6BN1vD4C5TNsniS/s5r//IDJd7p9 Sn7pviz7YgZigyVfI0lFE62tZw5zdotpqKhvtro/Pit/16MvdnmKWjvb u8I= ;; Received 511 bytes from 149.38.1.26#53(be.dns.eu) in 12 ms ecb.europa.eu. 3600 IN NS pdns109.ultradns.biz. ecb.europa.eu. 3600 IN NS pdns109.ultradns.org. ecb.europa.eu. 3600 IN NS ns8.colt.net. ecb.europa.eu. 3600 IN NS pdns109.ultradns.com. ecb.europa.eu. 3600 IN NS ns1.coltnet.at. ecb.europa.eu. 3600 IN NS pdns109.ultradns.net. ecb.europa.eu. 1800 IN NSEC ecdc.europa.eu. NS RRSIG NSEC ecb.europa.eu. 1800 IN RRSIG NSEC 8 3 1800 20220630185934 20220620133219 33483 europa.eu. bMTmiLGWf1qziqD1cjYJDv6CZ3ZVWSFcxkMnekRFNk0d1bf69aiu3emG /eZki0WLJxTHjlcHoVm9bJ5oR6bPgMl1AtIDe9Fk1oTU4gIcLf0a/YoJ jLzH9YXS96C5+uB4jKopHTWrM1nO51f/H28ficlp9DlVADqu6ygIgH0d GYZUgZ0pwk/SZE+okDyVkJQtotI3raslM2y+gg55ouZ5T5B+1CvqUJE5 3y8vEckhdGIIxjaN2bRK+4kJsv0EVQAHIPiAq2GYG/PZ2ALNA7YyyrGF 4nNXqcv8MjY3nuAea878d9K3a5clGs56xAF8Yju16PA/pVH3BEE2K5/7 +l8DwQ== ecb.europa.eu. 1800 IN RRSIG NSEC 8 3 1800 20220714114000 20220620133201 45108 europa.eu. qCsdZP+Q8MawhaEPfG1253VhAE5r5b8avrrYU6Oamk1uyqaRWWCMhAHk MqsWEG2uty5OTjtOjIKw2oVEKRWWob7/61hace4t0/Uu8PjGhtDQaaJD hGAwdFGcFDLx4PngmXQoUf76AulFWrb15avLRUV1w+kRkGAGTT/T9mwP aY61XtBBA9tS9MdFIxfX5UcGa9WfM2ZAqd+L3wByDS7DG9hW2FO+Uoux WBZKs+PxxEszN4cMV7FYzfDu4uGyIUMn4w3iqDe4IKuzTGRpN4TBGZiE L+Y3ZoUhSB3m+H3P2JOwa+zWICFcf5mogU1jms8oJ8X6wcIrOO1AVVRk 888b6w== ;; Received 863 bytes from 147.67.12.2#53(ns1lux.europa.eu) in 18 ms www.ecb.europa.eu. 300 IN CNAME www-ecb-europa-eu.ax4z.com. ;; Received 86 bytes from 156.154.64.109#53(pdns109.ultradns.com) in 25 ms 0.00user 0.00system 0:00.56elapsed 0%CPU (0avgtext+0avgdata 17072maxresident)k 0inputs+0outputs (15major+1204minor)pagefaults 0swaps [hubble:stock]:(~)$ dig -v DiG 9.9.9-P6 [hubble:stock]:(~)$ -- Robert M. Stockmann - RHCE Network Engineer - UNIX/Linux Specialist crashrecovery.org st...@stokkie.net -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
