Slow resolution with BIND 9.2. Server responding with 30 authority records

[Christopher LaPlante_1]

We have upgraded on of our DNS server to BIND 9.2 and are experienceing slow resolutions. When I set the debugs on using nslookup I see the server is responding with authority records = 30. Because of the authority records being large the packet get truncated and is resent through TCP. Is this a bug in 9.2?or is my named.conf messed up? When I set nslookup to another DNS server I get authority recordes = 0. See both outputs below


> set debug
> set d2
> ntob5
Name Server: jobsched.bose.com
Address: 139.68.133.99

Trying DNS
------------
SendRequest(), len 32
HEADER:
opcode = QUERY, id = 1142, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:
ntob5.bose.com, type = A, class = IN

------------
truncated answer
response truncated
------------
Got answer (1357 bytes):
HEADER:
opcode = QUERY, id = 1142, rcode = NOERROR
header flags: response, auth. answer, truncation, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 30, additional = 31

QUESTIONS:
ntob5.bose.com, type = A, class = IN
ANSWERS:
-> ntob5.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.132.29
ttl = 14400 (4H)
AUTHORITY RECORDS:
-> bose.com
type = NS, class = IN, dlen = 15
nameserver = switz-ge-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 15
nameserver = tolleson-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 16
nameserver = enduratec-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 16
nameserver = france-sg-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 16
nameserver = india-btc-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 16
nameserver = japan-bkk-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 16
nameserver = sweden-mo-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = austral-sy-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = austria-vi-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = belgium-to-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = denmark-br-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = framingham-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = germany-es-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = germany-fr-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = germany-no-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = holland-ed-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 17
nameserver = japan-bikk-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 9
nameserver = legion.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 11
nameserver = jobsched.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 12
nameserver = hills-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 12
nameserver = uk-gi-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = coladmg-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = colamfg-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = ireland-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = sanluis-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = tijuana-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 14
nameserver = toronto-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 15
nameserver = hongkong-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 15
nameserver = italy-ro-dc1.bose.com
ttl = 1800 (30M)
-> bose.com
type = NS, class = IN, dlen = 15
nameserver = shanghai-dc1.bose.com
ttl = 1800 (30M)
ADDITIONAL RECORDS:
-> legion.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.168.201
ttl = 1800 (30M)
-> jobsched.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.133.99
ttl = 14400 (4H)
-> hills-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.237.173
ttl = 900 (15M)
-> uk-gi-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.69.95
ttl = 1800 (30M)
-> coladmg-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.227.204
ttl = 1800 (30M)
-> colamfg-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.235.115
ttl = 1800 (30M)
-> colamfg-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.233.120
ttl = 1800 (30M)
-> ireland-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.73.159
ttl = 1800 (30M)
-> sanluis-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.248.15
ttl = 1800 (30M)
-> tijuana-dc1.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.244.205
ttl = 1800 (30M)
-> toronto-dc1.bose.com(form error.)
Name: ntob5.bose.com
Address: 139.68.132.29



---------------------------------------------
ntob5
Name Server: legion.bose.com
Address: 139.68.168.201

Trying DNS
------------
SendRequest(), len 32
HEADER:
opcode = QUERY, id = 1144, rcode = NOERROR
header flags: query, want recursion
questions = 1, answers = 0, authority records = 0, additional = 0

QUESTIONS:
ntob5.bose.com, type = A, class = IN

------------
------------
Got answer (48 bytes):
HEADER:
opcode = QUERY, id = 1144, rcode = NOERROR
header flags: response, auth. answer, want recursion, recursion avail.
questions = 1, answers = 1, authority records = 0, additional = 0

QUESTIONS:
ntob5.bose.com, type = A, class = IN
ANSWERS:
-> ntob5.bose.com
type = A, class = IN, dlen = 4
internet address = 139.68.132.29
ttl = 14400 (4H)

------------
Name: ntob5.bose.com
Address: 139.68.132.29

[harry d brown jr]

can you post your /etc/resolv.conf, /etc/nsswitch.conf, /etc/named.conf, and your config files identified in /etc/named.conf (ie /etc/named.data/db.* files)?

live free or die
harry