(Solved) Can't make config changes to Unbound

I'm having an issue with memory. specifically getswapspace failed. I was able to track it down to Unbound with high memory usage. However, anytime I try to change settings to DNS resolver I'm forced to reboot pfsense because the gui is unreponsive, as well as the shell.

I tried to disable DNS resolver but that also made everything unresponsive. I'm not too sure what to do at this point...

Uncheck "Enable TLD" in DNSBL seems to have reduced memory consumption and I can now make changes without crashing.

Gertjan

@angdigi said in Can't make config changes to Unbound:

I was able to track it down to Unbound with high memory usage

What is the pfSense version ?

@gertjan

2.4.4-RELEASE-p2 (amd64)
built on Wed Dec 12 07:40:18 EST 2018
FreeBSD 11.2-RELEASE-p6

Gertjan

@angdigi said in Can't make config changes to Unbound:

specifically getswapspace failed

cat /etc/fstab
?
swapinfo
?

RonpfS

When you save DNS Resolver Settings, it run unbound-checkconf before returning with the Apply Settings button.

When you have too many DSNBL tables, unbound will grab all memory and won't stop until you kill -9 unbound. Rebooting will do the same.

Remove big DNSBL URLs (on my 8GB box, I have around 1.1-1.2 millions DNSBL entries), monitor memory usage with Status Monitoring. TLD is intended to remove DNSBL entries with wildcard domains, but that also taxes the memory system.

.