DNS Resolver (Unbound) startet und stoppt ständig



  • Hallo!

    Ich nutze den DNS Resolver mit ziemlichen Standardsettings und alles läuft soweit auch. Doch in den Logs tauchen ständig Meldungen auf dass Unbound stoppt und wieder startet. Normal?

    Jun 11 16:40:40	unbound	63269:0	info: lower(secs) upper(secs) recursions
    Jun 11 16:40:40	unbound	63269:0	info: [25%]=0.016288 median[50%]=0.0326163 [75%]=0.105366
    Jun 11 16:40:40	unbound	63269:0	info: histogram of recursion processing times
    Jun 11 16:40:40	unbound	63269:0	info: average recursion processing time 3.818630 sec
    Jun 11 16:40:40	unbound	63269:0	info: server stats for thread 0: requestlist max 42 avg 4.0954 exceeded 0 jostled 0
    Jun 11 16:40:40	unbound	63269:0	info: server stats for thread 0: 984 queries, 122 answers from cache, 862 recursions, 8 prefetch, 0 rejected by ip ratelimiting
    Jun 11 16:40:40	unbound	63269:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:50:03	unbound	63269:0	info: start of service (unbound 1.6.8).
    Jun 11 15:50:03	unbound	63269:0	notice: init module 1: iterator
    Jun 11 15:50:03	unbound	63269:0	notice: init module 0: validator
    Jun 11 15:50:03	unbound	63269:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:03	unbound	63269:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:03	unbound	63269:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:50:03	unbound	63269:0	info: start of service (unbound 1.6.8).
    Jun 11 15:50:03	unbound	63269:0	notice: init module 1: iterator
    Jun 11 15:50:03	unbound	63269:0	notice: init module 0: validator
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:01	unbound	39769:0	info: 0.131072 0.262144 1
    Jun 11 15:50:01	unbound	39769:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:50:01	unbound	39769:0	info: [25%]=0 median[50%]=0 [75%]=0
    Jun 11 15:50:01	unbound	39769:0	info: histogram of recursion processing times
    Jun 11 15:50:01	unbound	39769:0	info: average recursion processing time 0.140867 sec
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 1: 1 queries, 0 answers from cache, 1 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:01	unbound	39769:0	info: 0.016384 0.032768 1
    Jun 11 15:50:01	unbound	39769:0	info: 0.008192 0.016384 1
    Jun 11 15:50:01	unbound	39769:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:50:01	unbound	39769:0	info: [25%]=0 median[50%]=0 [75%]=0
    Jun 11 15:50:01	unbound	39769:0	info: histogram of recursion processing times
    Jun 11 15:50:01	unbound	39769:0	info: average recursion processing time 0.018267 sec
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:01	unbound	39769:0	info: server stats for thread 0: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:01	unbound	39769:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:50:00	unbound	39769:0	info: start of service (unbound 1.6.8).
    Jun 11 15:50:00	unbound	39769:0	notice: init module 1: iterator
    Jun 11 15:50:00	unbound	39769:0	notice: init module 0: validator
    Jun 11 15:50:00	unbound	39769:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:50:00	unbound	39769:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:50:00	unbound	39769:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:50:00	unbound	39769:0	info: start of service (unbound 1.6.8).
    Jun 11 15:50:00	unbound	39769:0	notice: init module 1: iterator
    Jun 11 15:50:00	unbound	39769:0	notice: init module 0: validator
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:57	unbound	10152:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:57	unbound	10152:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:56	unbound	10152:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:56	unbound	10152:0	notice: init module 1: iterator
    Jun 11 15:49:56	unbound	10152:0	notice: init module 0: validator
    Jun 11 15:49:56	unbound	10152:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:56	unbound	10152:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:56	unbound	10152:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:56	unbound	10152:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:56	unbound	10152:0	notice: init module 1: iterator
    Jun 11 15:49:56	unbound	10152:0	notice: init module 0: validator
    Jun 11 15:49:54	unbound	65489:0	info: 0.032768 0.065536 1
    Jun 11 15:49:54	unbound	65489:0	info: 0.000000 0.000001 1
    Jun 11 15:49:54	unbound	65489:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:49:54	unbound	65489:0	info: [25%]=0 median[50%]=0 [75%]=0
    Jun 11 15:49:54	unbound	65489:0	info: histogram of recursion processing times
    Jun 11 15:49:54	unbound	65489:0	info: average recursion processing time 0.026520 sec
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 3: requestlist max 19 avg 13 exceeded 0 jostled 0
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 3: 7 queries, 2 answers from cache, 5 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:54	unbound	65489:0	info: 16.000000 32.000000 8
    Jun 11 15:49:54	unbound	65489:0	info: 8.000000 16.000000 1
    Jun 11 15:49:54	unbound	65489:0	info: 4.000000 8.000000 2
    Jun 11 15:49:54	unbound	65489:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:49:54	unbound	65489:0	info: [25%]=14 median[50%]=21 [75%]=26.5
    Jun 11 15:49:54	unbound	65489:0	info: histogram of recursion processing times
    Jun 11 15:49:54	unbound	65489:0	info: average recursion processing time 18.434097 sec
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 2: requestlist max 33 avg 18.4762 exceeded 0 jostled 0
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 2: 23 queries, 2 answers from cache, 21 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:54	unbound	65489:0	info: 16.000000 32.000000 1
    Jun 11 15:49:54	unbound	65489:0	info: 4.000000 8.000000 1
    Jun 11 15:49:54	unbound	65489:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:49:54	unbound	65489:0	info: [25%]=0 median[50%]=0 [75%]=0
    Jun 11 15:49:54	unbound	65489:0	info: histogram of recursion processing times
    Jun 11 15:49:54	unbound	65489:0	info: average recursion processing time 16.296249 sec
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 1: requestlist max 8 avg 4 exceeded 0 jostled 0
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 1: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:54	unbound	65489:0	info: 8.000000 16.000000 2
    Jun 11 15:49:54	unbound	65489:0	info: 2.000000 4.000000 2
    Jun 11 15:49:54	unbound	65489:0	info: 1.000000 2.000000 1
    Jun 11 15:49:54	unbound	65489:0	info: 0.016384 0.032768 1
    Jun 11 15:49:54	unbound	65489:0	info: lower(secs) upper(secs) recursions
    Jun 11 15:49:54	unbound	65489:0	info: [25%]=1.5 median[50%]=3 [75%]=10
    Jun 11 15:49:54	unbound	65489:0	info: histogram of recursion processing times
    Jun 11 15:49:54	unbound	65489:0	info: average recursion processing time 5.421695 sec
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 0: requestlist max 33 avg 19.1429 exceeded 0 jostled 0
    Jun 11 15:49:54	unbound	65489:0	info: server stats for thread 0: 25 queries, 4 answers from cache, 21 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:54	unbound	65489:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:02	unbound	65489:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:02	unbound	65489:0	notice: init module 1: iterator
    Jun 11 15:49:02	unbound	65489:0	notice: init module 0: validator
    Jun 11 15:49:02	unbound	65489:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:02	unbound	65489:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:02	unbound	65489:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:02	unbound	65489:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:02	unbound	65489:0	notice: init module 1: iterator
    Jun 11 15:49:02	unbound	65489:0	notice: init module 0: validator
    Jun 11 15:49:02	unbound	65489:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 2: requestlist max 3 avg 1.5 exceeded 0 jostled 0
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 2: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:01	unbound	65489:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:01	unbound	65489:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:01	unbound	65489:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:00	unbound	65489:0	notice: init module 1: iterator
    Jun 11 15:49:00	unbound	65489:0	notice: init module 0: validator
    Jun 11 15:49:00	unbound	65489:0	notice: Restart of unbound 1.6.8.
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:49:00	unbound	65489:0	info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:49:00	unbound	65489:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:49:00	unbound	65489:0	info: start of service (unbound 1.6.8).
    Jun 11 15:49:00	unbound	65489:0	notice: init module 1: iterator
    Jun 11 15:49:00	unbound	65489:0	notice: init module 0: validator
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 0: requestlist max 2 avg 1 exceeded 0 jostled 0
    Jun 11 15:48:54	unbound	26104:0	info: server stats for thread 0: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting
    Jun 11 15:48:54	unbound	26104:0	info: service stopped (unbound 1.6.8).
    Jun 11 15:48:53	unbound	26104:0	info: start of service (unbound 1.6.8).
    Jun 11 15:48:53	unbound	26104:0	notice: init module 1: iterator
    Jun 11 15:48:53	unbound	26104:0	notice: init module 0: validator
    Jun 11 15:48:53	unbound	26104:0	notice: Restart of unbound 1.6.8.
    

  • Moderator

    Mal mit dem General Syslog vergleichen ob da am Interface ständig was getriggert wird. Wenn er alle zu den Zeitpunkten jedes Mal ein GW Failure, neue IP etc. feststellt wird natürlich auch der DNS neu gestartet.



  • Nö, eigentlich nicht. Das waren die letzten Meldungen:

    Jun 11 15:50:38	ntopng		[HTTPserver.cpp:904] ERROR: Unable to start HTTP server (IPv4) on ports 3000s
    Jun 11 15:50:38	ntopng		[mongoose.c:4527] ERROR: set_ports_option: cannot bind to 3000s: Address already in use
    Jun 11 15:50:38	snmpd	77988	SIOCGIFDESCR (usbus1): Device not configured
    Jun 11 15:50:38	snmpd	77988	SIOCGIFDESCR (usbus0): Device not configured
    


  • Mir fällt gerade auf, dass das immer exakt jede Stunde passiert, dazwischen ist nichts.



  • Nutzt du so was wie pfblockerng? Wie ist das das Update Intervall?



  • Nein, gar nichts in die art. Lediglich Suricata. Aber das war auch schon bevor Suricata aktiv war.


  • Moderator

    Evtl. schon in die Crontab geschaut was da getriggert wird?



  • Wo genau findet ich das? Unter Cron habe ich kein Eintrag bzgl. des Resolvers.



  • Kann es sein, dass Du den DHCP Server aktiviert hast und dort die Registrierung der DNS Namen im Unbound aktiviert hast?



  • Ja, habe ich.



  • Das sorgt für den Neustart.
    Bei jeder Lease-Vergabe wird unbound restartet. Stell die Lease Time hoch oder deaktiviere es und pflege die Clients bzw Server IPs als static IPs im DHCP.