Re: [gentoo-server] Slow nameresolution with bind

[Alexander Zimmerling]

Am Freitag, den 05.03.2010, 10:59 +0100 schrieb Christian Bricart:
> Alexander Zimmerling wrote:
> > Hi guys,
> >
> > I am sitting here with my new gentoo server. At the moment I struggle
> > with bind. The problem is known, but I cannot solve it without help.
>
> > [..]
>
> have you tried to point upstream resolving to your provider's nameservers
> rather than always asking the root-nameservers..?
>
> try adding:
>
>   ..
>   forwarders {
>     8.8.8.8;
>     8.8.4.4;
>   };
>   ..
>
> to the "options { ..}"-block in your /etc/bind/named.conf - which will
> then ask the Google-DNS cluster for unknown/uncached RR.
> You may also specify your provider's DNS IPs there to have an even shorter
> round-trip for lookups.
>
> > P.S.: I've found a similar "bug" in bugzilla
> > (http://bugs.gentoo.org/show_bug.cgi?id=269202) but w/o resolution.
>
> i doubt that your problem is IPv6 related.
>
> Christian
>
>

Hi Christian,

find below my current (nearly copied) named.conf.
As you can see, forwarders are defined (a router, connected to the
internet). Name-resolution works like a charm in dmz (using the router).

<snip>

Tartessos ~ # cat /etc/bind/named.conf
//azi 2010 02 28
include "/etc/bind/log.conf";
options {
	directory "/var/bind";

	// uncomment the following lines to turn on DNS forwarding,
	// and change the forwarding ip address(es) :
	//forward first;
	forwarders {
		#192.168.0.3;
		192.168.5.1;
	};

//azi 2010 03 03
	listen-on-v6 { none; };
        listen-on { 127.0.0.1;
		    192.168.0.5;
	};

	// to allow only specific hosts to use the DNS server:
	allow-query {
		127.0.0.1;
		192.168.0.0/24;
	};

	auth-nxdomain yes;
	notify no;

	// if you have problems and are behind a firewall:
	//query-source address * port 53;
	pid-file "/var/run/named/named.pid";
	
	zone-statistics yes;
	statistics-file "/var/log/named.stats";
};

zone "." IN {
	type hint;
	file "named.ca";
};

zone "localhost" IN {
	type master;
	file "pri/localhost.zone";
	allow-update { none; };
	notify no;
};

zone "127.in-addr.arpa" IN {
	type master;
	file "pri/127.zone";
	allow-update { none; };
	notify no;
};

};


<snap>

I've added the provided forwarders, which -in deed- speeds up
name-resolution. Some queries are still slow, but I guess, this is ok.
Thanks for your help.

Have a nice weekend

- Alex