Unbound periodically stops resolving some hostnames

Started by vrtigo1, March 05, 2024, 07:01:37 PM

Previous topic - Next topic
Quote from: CJ on March 15, 2024, 03:25:26 PM
Quote from: vrtigo1 on March 13, 2024, 05:57:14 PM
Quote from: CJ on March 13, 2024, 01:09:19 PM
Quote from: vrtigo1 on March 12, 2024, 02:27:10 AM
Quote from: CJ on March 08, 2024, 03:51:45 PM
What do you have under DNS server options on the General page?

Under system > settings > general > DNS servers I have 1.1.1.1 and 8.8.8.8.

Not DNS servers.  DNS server options.  The section below where the DNS servers are entered.

Nothing checked there.

That's what I figured.  Right now you have Unbound operating in resolve mode which hits the root servers.  I assume you want it to be working in forwarding mode and using 1.1.1.1 and 8.8.8.8.

On Services: Unbound DNS: Query Forwarding check the Use System Nameservers checkbox.  If you prefer to use DoT, you can set that instead but then I'd recommend removing the entries from the General tab.

Is there any reason I want to use forwarders vs root servers?  I can understand forwarders would be necessary if I wanted to use a filtering service like OpenDNS, but failing that aren't all DNS servers designed to use root hints?

Quote from: vrtigo1 on March 22, 2024, 03:53:49 PM
Is there any reason I want to use forwarders vs root servers?  I can understand forwarders would be necessary if I wanted to use a filtering service like OpenDNS, but failing that aren't all DNS servers designed to use root hints?

Designed to use root is different from whether or not you should use root.  If everyone used the root servers it would overwhelm them.  That's why caching forwarders exist.

In your case, Unbound is attempting to contact IPv6 root servers and that's why you're having resolution failures.

Quote from: CJ on March 23, 2024, 04:55:20 PM
Quote from: vrtigo1 on March 22, 2024, 03:53:49 PM
Is there any reason I want to use forwarders vs root servers?  I can understand forwarders would be necessary if I wanted to use a filtering service like OpenDNS, but failing that aren't all DNS servers designed to use root hints?

Designed to use root is different from whether or not you should use root.  If everyone used the root servers it would overwhelm them.  That's why caching forwarders exist.

In your case, Unbound is attempting to contact IPv6 root servers and that's why you're having resolution failures.

This behavior seems like a bug if the system and Unbound are both configured to not use IPv6.  Do you know where this should be reported?