• BIND 9.16 incoming TCP connection errors

    From Anand Buddhdev@anandb@ripe.net to bind-users on Tue Jun 16 17:28:09 2020
    From Newsgroup: comp.protocols.dns.bind

    Hi folks,

    I'm running an authoritative server on BIND 9.16. It gets about 3500
    q/s, of which around 200 q/s are over TCP. At least, this is what DSC
    reports (DSC is a libpcap application sniffing traffic independent of BIND).

    In my named.conf, I have set:

    reserved-sockets 1000;
    tcp-clients 900;

    Yet, when BIND is running, it is frequently logging:

    16-Jun-2020 15:21:58.815 general: Accepting TCP connection failed:
    socket is not connected

    What does this log message mean? I don't think it's related to quota,
    because the quota message is different ("TCP connection failed: quota reached").

    Another question I have is that the "reserved-sockets" option has a note saying that it might go away. Does this mean that it's not actually
    necessary? The documentation suggests that I have to increase it if I
    want to increase the value of "tcp-clients".

    Regards,
    Anand
    --- Synchronet 3.18a-Linux NewsLink 1.113
  • From Tony Finch@dot@dotat.at to Anand Buddhdev on Tue Jun 16 19:17:15 2020
    From Newsgroup: comp.protocols.dns.bind

    Anand Buddhdev <anandb@ripe.net> wrote:

    16-Jun-2020 15:21:58.815 general: Accepting TCP connection failed: socket is not connected

    What does this log message mean?

    I think this error comes from getpeername() and it can occur if the
    connection is closed between accept() and getpeername(), which I wouldn't expect to happen all that frequently...

    Tony.
    --
    f.anthony.n.finch <dot@dotat.at> http://dotat.at/
    Biscay: West or northwest, 4 to 6, occasionally 3 later. Slight or moderate. Showers, perhaps thundery. Good, occasionally moderate.
    --- Synchronet 3.18a-Linux NewsLink 1.113
  • From Anand Buddhdev@anandb@ripe.net to bind-users on Thu Jun 18 11:49:14 2020
    From Newsgroup: comp.protocols.dns.bind

    On 16/06/2020 20:17, Tony Finch wrote:

    Hi Tony,

    16-Jun-2020 15:21:58.815 general: Accepting TCP connection failed: socket is not connected

    What does this log message mean?

    I think this error comes from getpeername() and it can occur if the connection is closed between accept() and getpeername(), which I wouldn't expect to happen all that frequently...

    Thank you for this. I wasn't seeing these messages under 9.14. They only appear on servers upgraded to 9.16.

    I'd appreciate it if one of the developers of BIND could shed some light
    on where this message comes from, so I can investigate what's going on.

    Regards,
    Anand
    --- Synchronet 3.18a-Linux NewsLink 1.113
  • From Felipe Agnelli Barbosa@no.molas@gmail.com to Anand Buddhdev on Mon Jun 22 14:29:42 2020
    From Newsgroup: comp.protocols.dns.bind

    --000000000000352dbf05a8af97ae
    Content-Type: text/plain; charset="UTF-8"
    Content-Transfer-Encoding: quoted-printable

    Em qui., 18 de jun. de 2020 =C3=A0s 06:49, Anand Buddhdev <anandb@ripe.net> escreveu:

    On 16/06/2020 20:17, Tony Finch wrote:

    Hi Tony,

    16-Jun-2020 15:21:58.815 general: Accepting TCP connection failed:
    socket is not connected

    What does this log message mean?

    I think this error comes from getpeername() and it can occur if the connection is closed between accept() and getpeername(), which I wouldn=
    't
    expect to happen all that frequently...

    Thank you for this. I wasn't seeing these messages under 9.14. They only appear on servers upgraded to 9.16.

    I'd appreciate it if one of the developers of BIND could shed some light
    on where this message comes from, so I can investigate what's going on.

    +1


    Regards,
    Anand
    _______________________________________________
    Please visit https://lists.isc.org/mailman/listinfo/bind-users to
    unsubscribe from this list

    ISC funds the development of this software with paid support
    subscriptions. Contact us at https://www.isc.org/contact/ for more information.


    bind-users mailing list
    bind-users@lists.isc.org
    https://lists.isc.org/mailman/listinfo/bind-users



    --=20
    " A d=C3=BAvida =C3=A9 o principio da sabedoria "

    --000000000000352dbf05a8af97ae
    Content-Type: text/html; charset="UTF-8"
    Content-Transfer-Encoding: quoted-printable

    <div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">= <div dir=3D"ltr" class=3D"gmail_attr">Em qui., 18 de jun. de 2020 =C3=A0s 0= 6:49, Anand Buddhdev &lt;<a href=3D"mailto:anandb@ripe.net">anandb@ripe.net= </a>&gt; escreveu:<br></div><blockquote class=3D"gmail_quote" style=3D"marg= in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e= x">On 16/06/2020 20:17, Tony Finch wrote:<br>

    Hi Tony,<br>

    &gt;&gt; 16-Jun-2020 15:21:58.815 general: Accepting TCP connection failed:=
    socket is not connected<br>
    &gt;&gt;<br>
    &gt;&gt; What does this log message mean?<br>
    &gt; <br>
    &gt; I think this error comes from getpeername() and it can occur if the<br=

    &gt; connection is closed between accept() and getpeername(), which I would= n&#39;t<br>
    &gt; expect to happen all that frequently...<br>

    Thank you for this. I wasn&#39;t seeing these messages under 9.14. They onl=
    y <br>
    appear on servers upgraded to 9.16.<br>

    I&#39;d appreciate it if one of the developers of BIND could shed some ligh=
    t <br>
    on where this message comes from, so I can investigate what&#39;s going on.= <br></blockquote><div>+1 <br></div><div>=C2=A0</div><blockquote class=3D"gm= ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,= 204,204);padding-left:1ex">
    Regards,<br>
    Anand<br>
    _______________________________________________<br>
    Please visit <a href=3D"https://lists.isc.org/mailman/listinfo/bind-users" = rel=3D"noreferrer" target=3D"_blank">https://lists.isc.org/mailman/listinfo= /bind-users</a> to unsubscribe from this list<br>

    ISC funds the development of this software with paid support subscriptions.=
    Contact us at <a href=3D"https://www.isc.org/contact/" rel=3D"noreferrer" = target=3D"_blank">https://www.isc.org/contact/</a> for more information.<br=



    bind-users mailing list<br>
    <a href=3D"mailto:bind-users@lists.isc.org" target=3D"_blank">bind-users@li= sts.isc.org</a><br>
    <a href=3D"https://lists.isc.org/mailman/listinfo/bind-users" rel=3D"norefe= rrer" target=3D"_blank">https://lists.isc.org/mailman/listinfo/bind-users</= a><br>
    </blockquote></div><br clear=3D"all"><br>-- <br><div dir=3D"ltr" class=3D"g= mail_signature">&quot; A d=C3=BAvida =C3=A9 o principio da sabedoria &quot;= <br><br></div></div>

    --000000000000352dbf05a8af97ae--
    --- Synchronet 3.18a-Linux NewsLink 1.113