9.16.* recursor has issues recursing
Hi,
we have rolled out 9.16.2 (and 9.16.1) and discovered a recurser issue with following "awkward" query:
dig @127.0.0.1 rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt; <<>> DiG 9.16.2 <<>> @127.0.0.1 rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 5790 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 59d6fa9f053c5865010000005ebd47c3e8421c3834504eb2 (good) ;; QUESTION SECTION: ;rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa. IN TXT
;; Query time: 556 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Do Mai 14 15:29:39 CEST 2020 ;; MSG SIZE rcvd: 166
Resolving works with bind up to version 9.11.18, unbound, knot-resolver, powerdns-recursor and following public-resolvers 1.1.1.1, 8.8.8.8, 9.9.9.9:
dig @1.1.1.1 rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt; <<>> DiG 9.16.2 <<>> @1.1.1.1 rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 689 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1452 ;; QUESTION SECTION: ;rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa. IN TXT
;; ANSWER SECTION: rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa. 68400 IN TXT "recursiontest"
;; Query time: 3984 msec ;; SERVER: 1.1.1.1#53(1.1.1.1) ;; WHEN: Do Mai 14 15:38:48 CEST 2020 ;; MSG SIZE rcvd: 273
And querying the authoritative NS for this zone works as well:
dig @ns3.univie.ac.at. rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt; <<>> DiG 9.16.2 <<>> @ns3.univie.ac.at. rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa txt ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37613 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; COOKIE: 40d61bae24f2455a010000005ebd4c9c5b4182e0414b7787 (good) ;; QUESTION SECTION: ;rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa. IN TXT
;; ANSWER SECTION: rec-test-dom-158937817846788.test123.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.3.4.3.5.4.0.8.2.6.0.1.0.0.2.ip6.arpa. 68400 IN TXT "recursiontest"
;; Query time: 0 msec ;; SERVER: 2001:62a:4:322::53:3#53(2001:62a:4:322::53:3) ;; WHEN: Do Mai 14 15:50:20 CEST 2020 ;; MSG SIZE rcvd: 192
If you need anything for further debugging don't hesitate to contact me.