Slow DNS Resolver Infrastructure Cache Speed

Gertjan

Did you try the default Resolver mode ?
Forwarding tends to be a couple of ms faster, but with "+700" on the scale I wouldn't bother.

This is considers 'not fast' - even on my 23 Mbits down, 2 Megabits up ADSL type of connection :

Note : 199.9.14.201 is the k-root server. One of the 13 real Internet root DNS servers. Not a commercial one.

Btw : it's always the ISP ! Your uplink is saturated, or, more up stream, their peering to 8.8.8.8 etc is plain bad.
Do a buffer bloat test.

Your " Infrastructure Cache Stats" is empty ?! Did you just restarted unbound ?
Mine restarted a week or so ago. Keep in mind that restarts will empty the cache => all the speed benefits are gone. My cache contains several thousands of entries.

johnpoz

@eria211 its a bad idea to forward to NS that do different stuff.. You have opendns in there "filtering" and then you have non filtering NS as well.

So which is it - do you want stuff filtered, or do you want stuff not filtered? Because you have no idea which one is going to get asked..

Eria211

@gertjan Thanks for your reply

I will toggle a few over to default resolver mode and report back

I have not restarted unbound since yesterday, I did think it was odd that there was nothing in the infrastructure cache but when I run

unbound-control -c /var/unbound/unbound.conf dump_cache

I do get output seemingly thousands of lines long

Could this be a GUI bug on the cache or do I have a cache problem? I am getting identical behavior on multiple pfsense units

@johnpoz I wasnt aware that 208.67.222.222 or 208.67.220.220 had filtering in place, I thought these opendns servers were the unfiltered ones

johnpoz

@eria211 said in Slow DNS Resolver Infrastructure Cache Speed:

I thought these opendns servers were the unfiltered ones

They don't have those - unless you went into your control panel and set filtering to none for the IP doing the queries. And even if you do that, I do believe they still actually filter some stuff.

Eria211

@johnpoz Ok thank you for that, I will make the change to disable forwarding mode later when the devices arent in use

Should I have entries in the DNS Resolver Infrastructure Cache Stats? or am I encountering a GUI bug? I do get results when I dump the cache in terminal but not when viewing it in the GUI

johnpoz

@eria211 what do you think should be in in your cache stats.. It would be the NS you have talked to.. That probe delay and lame should normally would be zeros

When you forward, the only NS listed there would be the ones your forwarding too. I have hundreds of entries because I resolve, not forward.

If you want to forward, have at it.. I personally do not understand why someone would want to even. Unless they had a problematic internet connection, or super high latency like sat connection or something.

Look at your recursion times.. Now look at mine, and I resolve.

thread0.recursion.time.avg=0.077631
thread0.recursion.time.median=0.0387047
thread1.recursion.time.avg=0.101424
thread1.recursion.time.median=0.0554224
thread2.recursion.time.avg=0.080589
thread2.recursion.time.median=0.0506946
thread3.recursion.time.avg=0.075362
thread3.recursion.time.median=0.0423724
total.recursion.time.avg=0.079575
total.recursion.time.median=0.0467985

Why anyone would send all their queries to some service (guess you trust them very much).. Now if what you wanted was their filtering - ok sure.. You trading off trust for service they provide, etc.

Gertjan

@eria211 said in Slow DNS Resolver Infrastructure Cache Speed:

or am I encountering a GUI bug?

The GUI runs something like "unbound-control -c /var/unbound/unbound.conf dump_cache" for you and then shows what was being dumped.

This might answer a future question : run this :

grep 'start' /var/log/resolver.log

and you know how often unbound restarts == how often the cache gets wiped == how often your local DNS stops functioning while it is restating.

johnpoz

@gertjan said in Slow DNS Resolver Infrastructure Cache Speed:

The GUI runs something like "unbound-control -c /var/unbound/unbound.conf dump_cache"

No the gui is showing you the INFRASTRUCTURE cache.. Not the actual cache.. which is not the same thing. The infrastructure cache is the the info it has about talking to NS. how fast they respond, etc. Which ones they are for domains, etc.

Not the cache of say www.whatever.tld..

The gui is showing you this
dump_infra show ping and edns entries

Gertjan

@johnpoz
Oops, you're right. '_dump' isn't '_infra'.

Eria211

@gertjan @johnpoz Thank you both for your advice, things are running a lot more smoothly now