Unbound bug in 18.7.6 new version ?

[RedQuark]

Dear community,

I just upgraded from 18.7.5 to the last 18.7.6 version.
Since this time, I encounter what I think is a bug with Unbound:
Very basic Unbound configuration, with just one "Domain Overrides" option added to help resolving another internal domain.

Once started, the Unbound service is working as it always did, but after half an hour, it suddenly stops to resolve the overriden specified domain. Howerver, it still continue to resolve any other external domains normally.
I checked that the "Domain Overrides" option did not disappear, but it was still there.

I have to restart the Unbound service to get it work normal again for twenty or forty minutes. Then restart it again.

(It was working good using 18.7.5 version).
I did not see anything related to something failing in the unbound logs.

I will be glad to help in debugging if it can help !

--
OPNsense 18.7.6-amd64
FreeBSD 11.1-RELEASE-p15
OpenSSL 1.0.2p 14 Aug 2018

[franco]

# opnsense-revert -r 18.7.5 unbound

If this works after service restart, there is an issue with Unbound. I'm not sure when / how to fix it.

[guest19228]

I update to 18.7.6 on 2018-10-25. I have an active domain override for my fritzbox.

Code: [Select]

forward-zone:
        name: "178.168.192.in-addr.arpa"
        forward-addr: 192.168.178.1
forward-zone:
        name: "d.f.in-addr.arpa"
        forward-addr: fe00:0:0:0:464e:6dff:fe27:2f0
forward-zone:
        name: "fritz.box"
        forward-addr: 192.168.178.1
        forward-addr: fd00:0:0:0:464e:6dff:fe27:2f0I did not experience your problem.

[RedQuark]

Many thanks for this tip ! I didn't knew the opnsense-revert command 
Just applied it and reverted to previous unboound version.
Will tell in a few days how it goes.
Many thanks !!

[franco]

Haven't seen this issue either, but happy to hear back...


Cheers,
Franco

[RedQuark]

Dear community,

A gentle update to confirm that since reverting to previous version, I did not encounter the issue anymore.
I will see how it goes with the next Opnsense (unbound) update 
(I stay ready to help if some debug action are needed).

Thanks again and regards !