Under certain circumstances, DNS zones representing Windows Active Directory domains can have rather large numbers of NS records if there are/were DCs running DNS. This can happen in any DNS zone with a large number of secondary DNS servers.
The size of the TCP packets is a problem. You might also look at minimal-responses. Look at the structure of your DNS environment. Bob
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users