Report information
The Basics
Id:
36611
Status:
resolved
Priority:
Medium/Medium
Queue:

People
Owner:
Nobody in particular
Cc:
AdminCc:

BugTracker
Version Fixed:
9.8.8, 9.9.6, 9.9.6-S1, 9.10.1, 9.11.0
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
(no value)
Severity:
S3 Low
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
feature

Dates
Created:Tue, 22 Jul 2014 10:45:13 -0400
Updated:Thu, 03 Aug 2017 21:37:27 -0400
Closed:Wed, 22 Oct 2014 01:47:55 -0400



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

Subject: the bind bug --timeout
Date: Tue, 22 Jul 2014 22:45:02 +0800
To: "bind9-bugs" <bind9-bugs@isc.org>
From: "±ùÐÄÓñºø" <ctlibin@foxmail.com>
We have a problem that use dig 9.9 ,the delay is too large.
The default behavior of dig changed in 9.9 to always use EDNS and set the AD bit.
But I set +noedns +nodnssec +noadflag£¬we still get a large delay.The window version similarly is better.Using the +noedns +nodnssec +noadflag is very affective.
How can fix the problem in the ubantu
 
libin@nocserver:~$ sudo dig www.qq.com +trace +noedns +nodnssec +noadflag
; <<>> DiG 9.9.5-3-Ubuntu <<>> www.qq.com +trace +noedns +nodnssec +noadflag
;; global options: +cmd
.                       345366  IN      NS      l.root-servers.net.
.                       345366  IN      NS      j.root-servers.net.
.                       345366  IN      NS      c.root-servers.net.
.                       345366  IN      NS      e.root-servers.net.
.                       345366  IN      NS      m.root-servers.net.
.                       345366  IN      NS      f.root-servers.net.
.                       345366  IN      NS      b.root-servers.net.
.                       345366  IN      NS      g.root-servers.net.
.                       345366  IN      NS      a.root-servers.net.
.                       345366  IN      NS      h.root-servers.net.
.                       345366  IN      NS      k.root-servers.net.
.                       345366  IN      NS      i.root-servers.net.
.                       345366  IN      NS      d.root-servers.net.
;; Received 496 bytes from 202.96.128.86#53(202.96.128.86) in 207 ms
com.                    172800  IN      NS      d.gtld-servers.net.
com.                    172800  IN      NS      b.gtld-servers.net.
com.                    172800  IN      NS      h.gtld-servers.net.
com.                    172800  IN      NS      e.gtld-servers.net.
com.                    172800  IN      NS      k.gtld-servers.net.
com.                    172800  IN      NS      a.gtld-servers.net.
com.                    172800  IN      NS      f.gtld-servers.net.
com.                    172800  IN      NS      g.gtld-servers.net.
com.                    172800  IN      NS      c.gtld-servers.net.
com.                    172800  IN      NS      l.gtld-servers.net.
com.                    172800  IN      NS      i.gtld-servers.net.
com.                    172800  IN      NS      j.gtld-servers.net.
com.                    172800  IN      NS      m.gtld-servers.net.
;; Received 500 bytes from 192.33.4.12#53(c.root-servers.net) in 15901 ms
qq.com.                 172800  IN      NS      ns1.qq.com.
qq.com.                 172800  IN      NS      ns2.qq.com.
qq.com.                 172800  IN      NS      ns3.qq.com.
qq.com.                 172800  IN      NS      ns4.qq.com.
;; Received 244 bytes from 192.33.14.30#53(b.gtld-servers.net) in 10220 ms
www.qq.com.             86400   IN      NS      ns-tel2.qq.com.
www.qq.com.             86400   IN      NS      ns-tel1.qq.com.
;; Received 136 bytes from 183.60.52.202#53(ns1.qq.com) in 5022 ms
www.qq.com.             300     IN      A       14.17.32.211
www.qq.com.             300     IN      A       183.60.15.153
;; Received 60 bytes from 101.226.66.18#53(ns-tel1.qq.com) in 30 ms

On Tue Jul 22 14:45:13 2014, ctlibin@foxmail.com wrote:
> We have a problem that use dig 9.9 ,the delay is too large.

Yes, those are very large delays..

This may not be your problem, but the last time I saw a similar
pattern, it was due to a local recursive server which had no
working outgoing IPv6 route but thought that it did.  The long
delays were from trying the servers which had AAAA 
records listed over IPv6, timing out, and then falling back to
the IPv4 server addresses.

Is it possible that that could be a factor in your case?


Subject: Re: [ISC-Bugs #36611] the bind bug --timeout
Date: Tue, 29 Jul 2014 11:00:34 +1000
To: bind9-bugs@isc.org
From: Mark Andrews <marka@isc.org>
The nameservers for the nameservers for qq.com are broken. They don't repond correctly to AAAA queries ns1.qq.com, ns2.qq.com, ns3.qq.com and ns4.qq.com. This causes delays when getting the next set of addresses to query, which are incorrectly included in the reported times. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org