Timeout and transitioning error

Unbound
1

Hello,

I just installed unbound and now trying it in production after first local test seem fine.

Now that the're some load on it, we now see several timeout (around 1 every 30 requests) and lot of error in log but can't find this error on google.

unbound[54539:1] error: transitioning to response state sans response

This was writen in log around 101086 times maybe 30 minutes.

OS is FreeBSD 9.0, net.inet.icmp.icmplim have been raise so dmesg don't report any error about this. I know this sysctl can affect bind so I raised it. Unbound version is the one on paquage so 1.4.13

I tryed to start it with -v -d but no error are shown on screen.

config :

--------------- config start ----------------
server:

     verbosity: 1
     logfile: /usr/local/etc/unbound/unbound.log

     interface: 0.0.0.0
     port: 53

     do-ip4: yes
     do-ip6: no
     do-udp: yes
     do-tcp: yes

     access-control: 0.0.0.0/0 allow_snoop

     hide-version: yes
     harden-glue: yes

     cache-min-ttl: 3600
     cache-max-ttl: 86400

     prefetch: yes

     num-threads: 3

     msg-cache-slabs: 4
     rrset-cache-slabs: 4
     infra-cache-slabs: 4
     key-cache-slabs: 4

     rrset-cache-size: 128m
     msg-cache-size: 64m

     unwanted-reply-threshold: 10000
     do-not-query-localhost: no
     val-clean-additional: yes

    forward-zone:
          name: "."
          forward-addr: 8.8.8.8
          forward-addr: 8.8.4.4
          forward-addr: 4.2.2.1
          forward-addr: 4.2.2.2
          forward-addr: 4.2.2.3
          forward-addr: 4.2.2.4
          forward-addr: 4.2.2.5
          forward-addr: 4.2.2.6

  stub-zone:
         name: "ourdomain.com"
         stub-addr: 127.0.0.1@customnsdport

    stub-zone:
         name: "ourseconddomain.com"
         stub-addr: 127.0.0.1@customnsdport

    stub-zone:
         name: "W.X.Z.in-addr.arpa"
         stub-addr: 127.0.0.1@customnsdport

    stub-zone:
         name: "Y.X.Z.in-addr.arpa"
         stub-addr: 127.0.0.1@customnsdport
----------------- config end ----------------------

I serched a lot the error but can find anything.

Anybody able to help.

Thanks

Michel

2

That's quite old. Try 1.4.18?

Paul

3

I just installed 1.4.18 from port and the error is still in the log. "error: transitioning to response state sans response." was logged 456 times in 46 minutes.

I will do some test to check if I still see timeout.

Thanks

Michel

4

Finally, it's a lot worst. Around, 75% of querie timeout. I will reinstall system with old version and tomorrow, I will probably try with OpenBSD instead to check if it's a bug in the config or with the OS.

Config :

server:

     verbosity: 1
     logfile: /usr/local/etc/unbound/unbound.log
     interface: 0.0.0.0
     port: 53

     do-ip4: yes
     do-ip6: no
     do-udp: yes
     do-tcp: yes

     access-control: 0.0.0.0/0 allow_snoop

     hide-version: yes
     harden-glue: yes
     cache-min-ttl: 3600
     cache-max-ttl: 86400
     prefetch: yes

     num-threads: 4
     outgoing-range: 206

     msg-cache-slabs: 8
     rrset-cache-slabs: 8
     infra-cache-slabs: 8
     key-cache-slabs: 8

     rrset-cache-size: 128m
     msg-cache-size: 64m

     unwanted-reply-threshold: 10000
     do-not-query-localhost: no
     val-clean-additional: yes

    forward-zone:
          name: "."
          forward-addr: 8.8.8.8
          forward-addr: 8.8.4.4
          forward-addr: 4.2.2.1
          forward-addr: 4.2.2.2
          forward-addr: 4.2.2.3
          forward-addr: 4.2.2.4
          forward-addr: 4.2.2.5
          forward-addr: 4.2.2.6

  stub-zone:
         name: "domain1.com"
         stub-addr: 127.0.0.1@nsdport

    stub-zone:
         name: "x.y.z.in-addr.arpa"
         stub-addr: 127.0.0.1@nsdport

    stub-zone:
         name: "w.y.z.in-addr.arpa"
         stub-addr: 127.0.0.1@nsdport

5

Hi Michel Blais,

I cannot reproduce this with the configuration that your give.

The outgoing-range is very low. Consider to recompiles with libevent
and set it to 2048.

Best regards,
   Wouter