| 2015-07-08 08:04:50 |
Patrik Lundin |
bug |
|
|
added bug |
| 2015-07-08 08:04:50 |
Patrik Lundin |
attachment added |
|
unbound_1.4.22-1ubuntu4.14.04.2.patch https://bugs.launchpad.net/bugs/1472510/+attachment/4426181/+files/unbound_1.4.22-1ubuntu4.14.04.2.patch |
|
| 2015-07-08 13:21:31 |
Patrik Lundin |
summary |
Unbound returns SERVFAIL for specific query on specific dual stacked machine |
Unbound returns SERVFAIL for specific query on dual stacked machine |
|
| 2015-07-08 13:34:13 |
Launchpad Janitor |
unbound (Ubuntu): status |
New |
Confirmed |
|
| 2015-07-08 13:34:20 |
Simon Déziel |
bug |
|
|
added subscriber Simon Déziel |
| 2015-07-10 13:05:45 |
Robie Basak |
unbound (Ubuntu): status |
Confirmed |
Triaged |
|
| 2015-07-10 13:06:06 |
Robie Basak |
bug |
|
|
added subscriber Ubuntu Server Team |
| 2015-07-10 13:06:25 |
Robie Basak |
unbound (Ubuntu): importance |
Undecided |
Medium |
|
| 2015-07-15 08:47:34 |
Robie Basak |
bug |
|
|
added subscriber Robie Basak |
| 2015-07-16 07:42:00 |
Patrik Lundin |
attachment added |
|
unbound_1.4.22-1ubuntu6.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4429922/+files/unbound_1.4.22-1ubuntu6.patch |
|
| 2015-07-16 08:08:37 |
Robie Basak |
nominated for series |
|
Ubuntu Trusty |
|
| 2015-07-16 08:08:37 |
Robie Basak |
bug task added |
|
unbound (Ubuntu Trusty) |
|
| 2015-07-16 08:08:47 |
Robie Basak |
unbound (Ubuntu Trusty): status |
New |
Triaged |
|
| 2015-07-16 08:08:51 |
Robie Basak |
unbound (Ubuntu Trusty): importance |
Undecided |
Medium |
|
| 2015-07-16 08:16:45 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
| 2015-07-16 08:16:51 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2015-07-16 10:00:24 |
Patrik Lundin |
attachment added |
|
unbound_1.4.22-1ubuntu6.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4430023/+files/unbound_1.4.22-1ubuntu6.patch |
|
| 2015-07-16 10:00:48 |
Patrik Lundin |
attachment removed |
unbound_1.4.22-1ubuntu6.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4429922/+files/unbound_1.4.22-1ubuntu6.patch |
|
|
| 2015-07-16 10:18:16 |
Robie Basak |
description |
Hello,
I noticed a problem on one of my dual stacked (IPv4 and IPv6) Trusty Tahr machines running unbound.
The problem initially was that i failed running dig +trace against it, where it would hang when looking up the root servers.
I could verify the problem using unbound-host:
===
# unbound-host -f /var/lib/unbound/root.key a.root-servers.net
Host a.root-servers.net not found: 2(SERVFAIL).
Host a.root-servers.net not found: 2(SERVFAIL).
Host a.root-servers.net not found: 2(SERVFAIL).
===
The most interesting part was that when forcing either IPv4 or IPv6, it worked:
===
# unbound-host -4 -f /var/lib/unbound/root.key a.root-servers.net
a.root-servers.net has address 198.41.0.4
a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
# unbound-host -6 -f /var/lib/unbound/root.key a.root-servers.net
a.root-servers.net has address 198.41.0.4
a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
===
Looking at the debug-output i noticed several occurences of the following messages:
===
# unbound-host -d -d -f /var/lib/unbound/root.key a.root-servers.net
[...]
[1436342178] libunbound[14283:0] debug: request has exceeded the maximum number of sends with 17
[1436342178] libunbound[14283:0] debug: return error response SERVFAIL
[...]
===
Comparing this against the changelog of unbound (https://www.unbound.net/download.html) I noticed 1.5.0 had increased the MAX_SENT_COUNT definition from 16 to 32.
Attached is a diff which backports this change, which solved my problem.
The most annoying thing about this problem is that I can not recreate it on another host which is both the same Ubuntu version and dual stacked. |
[Impact]
* Unbound is not able to look up certain hostnames in the default configuration when running on a dual stacked (IPv4 and IPv6) host.
* The impact of this on users is that it can lead to a nasty surprise when a currently IPv4-only host gets IPv6 connectivity.
[Test Case]
* On a machine that is currently dual stacked, you can verify the problem with unbound-host. Forcing it to IPv4- and IPv6 only should work, while allowing both will fail.
* IPv4-only (works):
===
unbound-host -4 -f /var/lib/unbound/root.key a.root-servers.net
===
* IPv6-only (works):
===
unbound-host -6 -f /var/lib/unbound/root.key a.root-servers.net
===
* Both (fails):
===
unbound-host -f /var/lib/unbound/root.key a.root-servers.net
===
[Regression Potential]
* I am not aware of any regression risks. Looking at the upstream tree I am not able to identify any diffs surrounding r3127 that seem relevant to this bump.
[Other Info]
* See attachement for debdiff against wily.
[Original Description]
Hello,
I noticed a problem on one of my dual stacked (IPv4 and IPv6) Trusty Tahr machines running unbound.
The problem initially was that i failed running dig +trace against it, where it would hang when looking up the root servers.
I could verify the problem using unbound-host:
===
# unbound-host -f /var/lib/unbound/root.key a.root-servers.net
Host a.root-servers.net not found: 2(SERVFAIL).
Host a.root-servers.net not found: 2(SERVFAIL).
Host a.root-servers.net not found: 2(SERVFAIL).
===
The most interesting part was that when forcing either IPv4 or IPv6, it worked:
===
# unbound-host -4 -f /var/lib/unbound/root.key a.root-servers.net
a.root-servers.net has address 198.41.0.4
a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
# unbound-host -6 -f /var/lib/unbound/root.key a.root-servers.net
a.root-servers.net has address 198.41.0.4
a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
===
Looking at the debug-output i noticed several occurences of the following messages:
===
# unbound-host -d -d -f /var/lib/unbound/root.key a.root-servers.net
[...]
[1436342178] libunbound[14283:0] debug: request has exceeded the maximum number of sends with 17
[1436342178] libunbound[14283:0] debug: return error response SERVFAIL
[...]
===
Comparing this against the changelog of unbound (https://www.unbound.net/download.html) I noticed 1.5.0 had increased the MAX_SENT_COUNT definition from 16 to 32.
Attached is a diff which backports this change, which solved my problem.
The most annoying thing about this problem is that I can not recreate it on another host which is both the same Ubuntu version and dual stacked. |
|
| 2015-07-16 10:27:39 |
Robie Basak |
unbound (Ubuntu): status |
Triaged |
Fix Committed |
|
| 2015-07-16 11:10:52 |
Patrik Lundin |
attachment added |
|
unbound_1.4.22-1ubuntu4.14.04.2.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4430045/+files/unbound_1.4.22-1ubuntu4.14.04.2.patch |
|
| 2015-07-16 11:11:13 |
Patrik Lundin |
attachment removed |
unbound_1.4.22-1ubuntu4.14.04.2.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4426181/+files/unbound_1.4.22-1ubuntu4.14.04.2.patch |
|
|
| 2015-07-16 11:13:00 |
Patrik Lundin |
attachment removed |
unbound_1.4.22-1ubuntu4.14.04.2.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4430045/+files/unbound_1.4.22-1ubuntu4.14.04.2.patch |
|
|
| 2015-07-16 11:14:34 |
Patrik Lundin |
attachment added |
|
1.4.22-1ubuntu4.14.04.2.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4430046/+files/1.4.22-1ubuntu4.14.04.2.patch |
|
| 2015-07-16 11:33:05 |
Launchpad Janitor |
unbound (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2015-07-16 13:03:04 |
Robie Basak |
unbound (Ubuntu Trusty): status |
Triaged |
In Progress |
|
| 2015-07-16 13:17:12 |
Robie Basak |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2015-07-17 20:19:21 |
Brian Murray |
unbound (Ubuntu Trusty): status |
In Progress |
Fix Committed |
|
| 2015-07-17 20:19:23 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2015-07-17 20:19:27 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2015-07-17 20:19:31 |
Brian Murray |
tags |
patch |
patch verification-needed |
|
| 2015-07-18 00:14:09 |
Simon Déziel |
tags |
patch verification-needed |
patch verification-done |
|
| 2015-07-20 08:10:30 |
Patrik Lundin |
attachment added |
|
unbound-1.4.22-1ubuntu6-vivid.patch https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1472510/+attachment/4431464/+files/unbound-1.4.22-1ubuntu6-vivid.patch |
|
| 2015-07-20 09:40:40 |
Robie Basak |
nominated for series |
|
Ubuntu Vivid |
|
| 2015-07-20 09:40:40 |
Robie Basak |
bug task added |
|
unbound (Ubuntu Vivid) |
|
| 2015-07-20 09:40:52 |
Robie Basak |
unbound (Ubuntu Vivid): status |
New |
In Progress |
|
| 2015-07-22 13:38:13 |
Chris J Arges |
unbound (Ubuntu Vivid): status |
In Progress |
Fix Committed |
|
| 2015-07-22 13:38:19 |
Chris J Arges |
tags |
patch verification-done |
patch |
|
| 2015-07-22 13:38:20 |
Chris J Arges |
tags |
patch |
patch verification-needed |
|
| 2015-07-22 14:30:26 |
Patrik Lundin |
tags |
patch verification-needed |
patch verification-done |
|
| 2015-07-28 17:04:46 |
Launchpad Janitor |
unbound (Ubuntu Trusty): status |
Fix Committed |
Fix Released |
|
| 2015-07-28 17:04:51 |
Adam Conrad |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2015-07-28 20:54:53 |
Launchpad Janitor |
unbound (Ubuntu Vivid): status |
Fix Committed |
Fix Released |
|
