8 Srp
2018
8 Srp
'18
10:59
Hello,
I have an issue with a zone where KNOT is slave server. I am not able to
transfer a zone: refresh, failed (no usable master). BIND is able to
transfer this zone and with host command AXFR works as well. There are
more domains on this master and the others are working. The thing is
that I can see in Wireshark that the AXFR is started, zone transfer
starts and for some reason KNOT after the 1st ACK to AXFR response
terminates the TCP connection with RST resulting in AXFR fail. AXFR
response is spread over several TCP segments.
I can provide traces privately.
KNOT 2.6.7-1+0~20180710153240.24+stretch~1.gbpfa6f52
Thanks for help.
BR
Ales Rygl
8 Srp
8 Srp
22:53
New subject: refresh, failed (no usable master) - possible TCP issue
Hello,
On 2018-08-08 10:59, Aleš Rygl wrote:
Hello,
I have an issue with a zone where KNOT is slave server. I am not able
to transfer a zone: refresh, failed (no usable master). BIND is able
to transfer this zone and with host command AXFR works as well. There
are more domains on this master and the others are working. The thing
is that I can see in Wireshark that the AXFR is started, zone transfer
starts and for some reason KNOT after the 1st ACK to AXFR response
terminates the TCP connection with RST resulting in AXFR fail. AXFR
response is spread over several TCP segments.
On how many interfaces is the server listening? Don't you need to set
https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
Dan
I can provide traces privately.
KNOT 2.6.7-1+0~20180710153240.24+stretch~1.gbpfa6f52
Thanks for help.
BR
Ales Rygl
9 Srp
9 Srp
8:56
New subject: refresh, failed (no usable master) - possible TCP issue
Hi Dan,
On 8.8.2018 22:53, daniel.salzman(a)nic.cz wrote:
On how many interfaces is the server listening? Don't you need to set
https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
Dan
The server is listening on two interfaces. I have just tried the option
you suggest and no change. What is interesting that just one domain from
about 10 hosted on the same server is affected.
BR
Ales
13:41
New subject: refresh, failed (no usable master) - possible TCP issue
On 2018-08-09 08:56, Aleš Rygl wrote:
Hi Dan,
On 8.8.2018 22:53, daniel.salzman(a)nic.cz wrote:
Is this domain bigger than the other ones (multi-message AXFR)?
Are you able to transfer to zone using kdig?
What software is on the master side?
On how many interfaces is the server listening? Don't you need to set
https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
Dan
The server is listening on two interfaces. I have just tried the
option you suggest and no change. What is interesting that just one
domain from about 10 hosted on the same server is affected.
BR
Ales
15:02
New subject: refresh, failed (no usable master) - possible TCP issue
On 9.8.2018 13:41, daniel.salzman(a)nic.cz wrote:
On 2018-08-09 08:56, Aleš Rygl wrote:
Yes, this domain is bigger, it's size is
about 4KiB. I am able to
transfer it via kdig without an issue. I have no idea of the remote
software nevertheless I can check it.
Ales
Hi Dan,
On 8.8.2018 22:53, daniel.salzman(a)nic.cz wrote:
Is this domain bigger than the other ones (multi-message AXFR)?
Are you able to transfer to zone using kdig?
What software is on the master side?
On how many interfaces is the server listening? Don't you need to set
https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
Dan
The server is listening on two interfaces. I have just tried the
option you suggest and no change. What is interesting that just one
domain from about 10 hosted on the same server is affected.
13 Srp
13 Srp
14:35
New subject: refresh, failed (no usable master) - possible TCP issue
Just for the record.
We have discovered that the master server (Windows 2008 R2 Datacenter)
returns broken
AXFR just for a specific zone if corresponding query contains EDNS
section.
Daniel
On 2018-08-09 15:02, Aleš Rygl wrote:
On 9.8.2018 13:41, daniel.salzman(a)nic.cz wrote:
On 2018-08-09 08:56, Aleš Rygl wrote:
Yes, this domain is bigger, it's size is
about 4KiB. I am able to
transfer it via kdig without an issue. I have no idea of the remote
software nevertheless I can check it.
Ales Hi Dan,
On 8.8.2018 22:53, daniel.salzman(a)nic.cz wrote:
Is this domain bigger than the other ones (multi-message AXFR)?
Are you able to transfer to zone using kdig?
What software is on the master side?
On how many interfaces is the server listening? Don't you need to
set
https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
Dan
The server is listening on two interfaces. I have just tried the
option you suggest and no change. What is interesting that just one
domain from about 10 hosted on the same server is affected.
22 Srp
22 Srp
15:36
Hi all,
Even droping and recreating this specific zone did not help. The master server
was then migrated to Windows server 2016 and AXFR is working.
BR
Ales
On Monday 13 of August 2018 14:35:18 daniel.salzman(a)nic.cz wrote:
Just for the record.
We have discovered that the master server (Windows 2008 R2 Datacenter)
returns broken
AXFR just for a specific zone if corresponding query contains EDNS
section.
Daniel
On 2018-08-09 15:02, Aleš Rygl wrote:
> On 9.8.2018 13:41, daniel.salzman(a)nic.cz wrote:
>> On 2018-08-09 08:56, Aleš Rygl wrote:
>>> Hi Dan,
>>>
>>> On 8.8.2018 22:53, daniel.salzman(a)nic.cz wrote:
>>>> On how many interfaces is the server listening? Don't you need to
>>>> set
>>>> https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#via ?
>>>>
>>>> Dan
>>>
>>> The server is listening on two interfaces. I have just tried the
>>> option you suggest and no change. What is interesting that just one
>>> domain from about 10 hosted on the same server is affected.
>>
>> Is this domain bigger than the other ones (multi-message AXFR)?
>> Are you able to transfer to zone using kdig?
>> What software is on the master side?
>
> Yes, this domain is bigger, it's size is about 4KiB. I am able to
> transfer it via kdig without an issue. I have no idea of the remote
> software nevertheless I can check it.
>
> Ales
2284
days inactive
2298
days old
6 comments
2 participants
participants (2)
-
Aleš Rygl -
daniel.salzman＠nic.cz