Имеем роутер на openbsd, на который делегирована зона bsd.ne-vlezay80.
Иногда зона перестаёт отвечать, в логах головного сервера наблюдается при этом:
Nov 17 00:33:19 localhost named[1391]: lame server resolving 'ws.bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 198.18.52.2#53
Nov 17 00:33:19 localhost named[1391]: lame server resolving 'ws.bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 2a01:d0:xxxx:10::2#53
Nov 17 00:33:36 localhost named[1391]: received control channel command 'flush'
Nov 17 00:33:36 localhost named[1391]: flushing caches in all views succeeded
Nov 17 00:33:38 localhost named[1391]: lame server resolving 'bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 198.18.52.2#53
Nov 17 00:33:38 localhost named[1391]: lame server resolving 'bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 2a01:d0:xxxx:10::2#53
Nov 17 00:34:40 localhost named[1391]: received control channel command 'flush'
Nov 17 00:34:40 localhost named[1391]: flushing caches in all views succeeded
Nov 17 00:34:53 localhost named[1391]: received control channel command 'flush'
Nov 17 00:34:53 localhost named[1391]: flushing caches in all views succeeded
Nov 17 00:34:56 localhost named[1391]: lame server resolving 'bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 2a01:d0:xxxx:10::2#53
Nov 17 00:34:56 localhost named[1391]: lame server resolving 'bsd.ne-vlezay80' (in 'bsd.ne-vlezay80'?): 198.18.52.2#53
Nov 17 00:40:05 localhost named[1391]: client 2a01:d0:xxxx:81:100::2#52361 (ne-vlezay80): query 'ne-vlezay80/SOA/IN' denied
Nov 17 00:40:05 localhost named[1391]: client 2a01:d0:xxxx:81:100::2#50811 (ne-vlezay80): transfer of 'ne
По tcpdump видно, что unbound почему-то отправляет пустой ответ на запрос.
obsd-router# tcpdump -i vio0 -ne port 53
tcpdump: listening on vio0, link-type EN10MB
00:32:34.343998 52:54:48:22:28:01 52:54:00:71:00:01 0800 86: 198.18.50.12.33645 > 198.18.52.2.53: 34860% [1au] A? bsd.ne-vlezay80.(44)
00:32:34.344111 52:54:00:71:00:01 52:54:48:22:28:01 0800 147: 198.18.52.2.53 > 198.18.50.12.33645: 34860 0/1/3(105)
00:32:34.344701 52:54:48:22:28:01 52:54:00:71:00:01 86dd 106: 2a01:d0:xxxx:8::12.46569 > 2a01:d0:xxxx:10::2.53: 41610% [1au] A? bsd.ne-vlezay80.(44) [flowlabel 0x25fc4]
00:32:34.344761 52:54:00:71:00:01 52:54:48:22:28:01 86dd 167: 2a01:d0:xxxx:10::2.53 > 2a01:d0:xxxx:8::xx.46569: 41610 0/1/3(105)
^C
32 packets received by filter
0 packets dropped by kernel
Самое интересное то, что после того, как я перезапустил unbound, то всё стало работать нормально.
