Skip navigation

DNS  after reducing the advertised EDNS UDP packet size to 512 octets

6181 Views 8 Replies Latest reply: Aug 9, 2013 1:19 PM by oszillo RSS
leo.xue Calculating status...
Currently Being Moderated
Mar 3, 2011 10:47 PM
hello
There is something wrong with my DNS server, it open internet webs so slow,and i have no idea with this .



04-Mar-2011 14:31:57.264 zone 0.0.127.in-addr.arpa/IN/com.apple.ServerAdmin.DNS.public: loaded serial 1997022700
04-Mar-2011 14:31:57.264 zone 15.0.168.192.in-addr.arpa/IN/com.apple.ServerAdmin.DNS.public: loaded serial 2011030204
04-Mar-2011 14:31:57.265 zone ******/IN/com.apple.ServerAdmin.DNS.public: loaded serial 2011030404
04-Mar-2011 14:31:57.265 zone localhost/IN/com.apple.ServerAdmin.DNS.public: loaded serial 42
04-Mar-2011 14:31:57.265 running
04-Mar-2011 14:32:00.066 host unreachable resolving 'b.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:7fd::1#53
04-Mar-2011 14:32:00.261 host unreachable resolving 'r.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:500:2f::f#53
04-Mar-2011 14:32:00.261 host unreachable resolving 'r.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:503:c27::2:30#53
04-Mar-2011 14:32:00.261 host unreachable resolving 'r.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:503:ba3e::2:30#53
04-Mar-2011 14:32:00.261 host unreachable resolving 'r.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:7fd::1#53
04-Mar-2011 14:32:00.261 host unreachable resolving 'r.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:dc3::35#53
04-Mar-2011 14:32:00.361 host unreachable resolving 'dr.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:500:1::803f:235#53
04-Mar-2011 14:32:00.361 host unreachable resolving 'dr.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:7fd::1#53
04-Mar-2011 14:32:00.361 host unreachable resolving 'dr.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:dc3::35#53
04-Mar-2011 14:32:00.361 host unreachable resolving 'dr.dns-sd.udp.0.0.168.192.in-addr.arpa/PTR/IN': 2001:503:ba3e::2:30#53
04-Mar-2011 14:32:00.866 host unreachable resolving './NS/IN': 2001:7fd::1#53
04-Mar-2011 14:32:01.005 success resolving './NS' (in '.'?) after reducing the advertised EDNS UDP packet size to 512 octets
04-Mar-2011 14:32:01.408 success resolving 'local/SOA' (in '.'?) after disabling EDNS
04-Mar-2011 14:32:01.533 host unreachable resolving 't.arin.net/AAAA/IN': 2001:503:ba3e::2:30#53
04-Mar-2011 14:32:01.534 host unreachable resolving 'v.arin.net/AAAA/IN': 2001:500:1::803f:235#53
04-Mar-2011 14:32:01.534 host unreachable resolving 'v.arin.net/AAAA/IN': 2001:7fd::1#53
04-Mar-2011 14:32:01.534 host unreachable resolving 'v.arin.net/AAAA/IN': 2001:503:ba3e::2:30#53
04-Mar-2011 14:32:01.534 host unreachable resolving 'w.arin.net/A/IN': 2001:500:1::803f:235#53


anyone help!! Thanks a lot.

Message was edited by: leo.xue
xserver, Mac OS X (10.6.1), DNS
  • tyrol25 Calculating status...
    I have exact same problem but found no solution. Do you have this issue continuously or intermittently?
    MacMini, Mac OS X (10.6.7)
  • MrHoffman Level 6 Level 6 (11,745 points)
    Shut off IPv6 DNS networking and try again.

    That probably easiest via System Preferences > Network > select controller > Advanced ... > TCP/IP > Configure IPv6 > Off. (There's also a way to shut it off for BIND at launch time via tweaking the startup plist, but let us not go there first.)

    The "DNS after reducing the advertised EDNS UDP packet size to 512" stuff is a problem with an intervening DNS server, or the path to a DNS server. If there are forwarding servers configured, remove them and remove the references. There is probably a broken firewall/gateway/router box here (or more?) that are blocking UDP packet fragments, or that are blocking UDP packets larger than 512 bytes, etc.
  • tyrol25 Level 1 Level 1 (0 points)
    Mr. Hoffman,

    Thank you for the advice. At least in my case, shutting off IPv6 and deleting the forwarding DNS servers didn't solve the issue. Only after replacing the Airport Extreme Base Station with another router (D-Link) the problem appears to have disappeared. The AEBS is still under warranty so I'll be contacting Apple about this.

    Thanks again for your suggestions!
    iMac, Mac OS X (10.6.6)
  • Heath Roberts Calculating status...

    Turning off IPv6 doesn't seem to make any difference for me, either--some of the failures are AAAA records, but A queries are equallt unresolvable. For me, the problem seems to be caused by a Time Warner Ubee router that doesn't like DNS requests larger than 512 bytes, combined with the fact that Snow Leopard's DNS resolver *really* wants to use EDNS & provides no mechanism to turn it off.

     

    (yes, I know it's "TWC's problem", but it's affecting *me*, and I'd like to fix it (well, implement a workaround) in less time than TWC is likely to take)

  • Heath Roberts Level 1 Level 1 (0 points)

    It may be early to declare victory, but it appears that forcing bind to port 53 per the comment in /etc/named.conf:

     

        /*

         * If there is a firewall between you and nameservers you want

         * to talk to, you might need to uncomment the query-source

         * directive below.  Previous versions of BIND always asked

         * questions using port 53, but BIND 8.1 uses an unprivileged

         * port by default.

         */

        // query-source address * port 53;

     

    (i.e. take out those two slashes in front of "query-source address")

     

    has worked.

    I'll have to do tcpdump some traffic sometime to see whether bind is still sending EDNS requests.

  • MrHoffman Level 6 Level 6 (11,745 points)

    Are you using DNS forwarding on your DNS server?  If so, shut that off and run some tests.  (DNS forwarders from within a DNS server is generally only necessary for DNS caching servers or when you're using a DNS-based nanny filter or such.)

  • Olaf Seifert Level 1 Level 1 (45 points)

    I had the same error messages. I found the problem in faulty network settings of the server: wrong router-IP-address. DNS-IP was right but the DNS-requests of the server didn't find their way to the nameserver.

  • oszillo Calculating status...

    also interesting, when setting DNS servers IPs in Network Settings for your host,

    it is important that the IPs are not doubled.

     

    in example if you have Networksettings like

    automatic DHCP given from router or server.

    IP-Adress: 192.168.2.2

    Subnetmask: 255.255.255.0

    Router IP: 192.168.2.1

    DNS-Server: 127.0.0.1, 192.168.2.2

    wich means localhost and again same machine, just different IP..
    then your lookup mechanism has to walk thru this steps to know if there is nothing inside to resolve adresses.

     

    which means in this example it would take double the time if DNS-Server would be just 127.0.0.1

     

    you can see if there is a lot to work thru in your logs.

    look for something like "sizing zone task pool based on 9 zones".

    this mount of zones will change if you set the correct DNS server IP.

    more zones are slower than less, very logical!

     

    but this will not solve your problem with packet size at all, it just reduces circles after dns resolves not known adresses even with packet size change.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.