Hi all,
I’m finding that from a VM in our OpenStack cluster if I `unbound-host` against an instance name of any VM, the query comes back SERVFAIL. When I do `unbound-host -dd $instance_name` I get a bit more detail:
Hi Felipe,
I don't see something wrong.
Unbound tries to resolve something and it gets these answers from upstreams that are marked as THROWAWAY (SERVFAIL I assume from the domain name).
There is a limit on how many times a certain upstream server is going to be asked (OUTBOUND_MSG_RETRY) and there is a further limit on how many queries are allowed to be sent totally (MAX_SENT_COUNT). The latter one is useful for cases when a domain has a long list of nameservers that mainly provide THROWAWAY answers.
Best regards,
-- George