CARVIEW |
Select Language
HTTP/2 200
date: Tue, 15 Jul 2025 06:17:50 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=0, private, must-revalidate
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
link: ; rel=preload; as=fetch; crossorigin=use-credentials
referrer-policy: no-referrer-when-downgrade
server-timing: issue_layout-fragment;desc="issue_layout fragment";dur=190.510382,issue_conversation_content-fragment;desc="issue_conversation_content fragment";dur=465.454277,issue_conversation_sidebar-fragment;desc="issue_conversation_sidebar fragment";dur=49.816769,nginx;desc="NGINX";dur=1.582556,glb;desc="GLB";dur=107.076647
strict-transport-security: max-age=31536000; includeSubdomains; preload
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, Accept,Accept-Encoding, Accept, X-Requested-With
x-content-type-options: nosniff
x-frame-options: deny
x-voltron-version: 6a3bf42
x-xss-protection: 0
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=IqDI7SXgTznQWVq9dIF2KCA%2FXg4Sxygydv55JuahadGXIwnnK%2BiOVxX6gU1xZpucbxusMDa62%2FYNWmOsVrF%2BmCt49rfbDKa2MdvAL9%2F4vwZZLdQQtR8ARmTpO4MOpFcwZMyjwDLJJpvVzHgMRijnmGXnVE%2FCZLmkVBNlLW3Ilx7sQ%2FlUBQs5J%2FnOypLTR721B57NKEgn0HU%2FtNcyz%2FnXZPSkmXkLVH%2FiL%2FbTtjAGI%2BEV6J1V1tkO9bBgKc916OtJsoruvnDJcJpVkPhPg8LIxQ%3D%3D--%2BwzdoZnxaVh91Ha1--Jbi0Lnw0nRPM8HYHg6cybA%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1954228989.1752560270; Path=/; Domain=github.com; Expires=Wed, 15 Jul 2026 06:17:50 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Wed, 15 Jul 2026 06:17:50 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: 8038:23A3E6:239168:291B4C:6875F28E
NSD doesn't refresh zones after extended downtime · Issue #25 · NLnetLabs/nsd · GitHub
No labelsNo typeNo projectsNo milestoneNone yetNo branches or pull requests
Skip to content
Navigation Menu
{{ message }}
-
-
Notifications
You must be signed in to change notification settings - Fork 112
Closed
Description
I have a test server, where I had last run NSD in March 2019. Then I had shut it down. Today, I installed a new version of NSD, and started it. It has 3 slave zones configured. The log showed this:
[2019-07-18 10:02:56.198] nsd[1187]: notice: nsd starting (NSD 4.2.1)
[2019-07-18 10:02:56.765] nsd[1188]: info: zone . read with success
[2019-07-18 10:02:56.768] nsd[1188]: info: zone arpa. read with success
[2019-07-18 10:02:56.768] nsd[1188]: info: zone root-servers.net. read with success
[2019-07-18 10:02:56.768] nsd[1188]: notice: nsd started (NSD 4.2.1), pid 1187
[2019-07-18 10:06:10.608] nsd[1188]: warning: signal received, shutting down...
Notice that NSD did not refresh any of the zones, even though they are vastly out of date. Now, this is caused by the timers on xfrd.state (which is shown below). I think the issue here is that NSD isn't checking the time of the state file with current system time, and so doesn't realise that the refresh timers are too old, and that it should immediately refresh these zones. Even at exit, it still saves the refresh timers, and won't update if I start it again. I think the value of next_timeout
should take into account the current system time.
NSDXFRD2
# This file is written on exit by nsd xfr daemon.
# This file contains slave zone information:
# * timeouts (when was zone data acquired)
# * state (OK, refreshing, expired)
# * which master transfer to attempt next
# The file is read on start (but not on reload) by nsd xfr daemon.
# You can edit; but do not change statement order
# and no fancy stuff (like quoted "strings").
#
# If you remove a zone entry, it will be refreshed.
# This can be useful for an expired zone; it revives
# the zone temporarily, from refresh-expiry time.
# If you delete the file all slave zones are updated.
#
# Note: if you edit this file while nsd is running,
# it will be overwritten on exit by nsd.
filetime: 1563444370 # Thu Jul 18 10:06:10 2019
# The number of zone entries in this file
numzones: 3
zone: name: .
state: 0 # OK
master: 0
next_master: -1
round_num: -1
next_timeout: 1707 # = 28m 27s
backoff: 0
soa_nsd_acquired: 1553543862 # was 114d 14h 8m 28s ago
soa_nsd: 6 1 86400 1792 a.root-servers.net. nstld.verisign-grs.com. 2019032501 1800 900 604800 86400
# refresh = 30m retry = 15m expire = 7d minimum = 1d
soa_disk_acquired: 1563444176 # was 3m 14s ago
soa_disk: 6 1 86400 1792 a.root-servers.net. nstld.verisign-grs.com. 2019032501 1800 900 604800 86400
# refresh = 30m retry = 15m expire = 7d minimum = 1d
soa_notify_acquired: 0
zone: name: arpa.
state: 0 # OK
master: 0
next_master: -1
round_num: -1
next_timeout: 1572 # = 26m 12s
backoff: 0
soa_nsd_acquired: 1553543862 # was 114d 14h 8m 28s ago
soa_nsd: 6 1 86400 1792 a.root-servers.net. nstld.verisign-grs.com. 2019032501 1800 900 604800 86400
# refresh = 30m retry = 15m expire = 7d minimum = 1d
soa_disk_acquired: 1563444176 # was 3m 14s ago
soa_disk: 6 1 86400 1792 a.root-servers.net. nstld.verisign-grs.com. 2019032501 1800 900 604800 86400
# refresh = 30m retry = 15m expire = 7d minimum = 1d
soa_notify_acquired: 0
zone: name: root-servers.net.
state: 0 # OK
master: 0
next_master: -1
round_num: -1
next_timeout: 12555 # = 3h 29m 15s
backoff: 0
soa_nsd_acquired: 1553543861 # was 114d 14h 8m 29s ago
soa_nsd: 6 1 3600000 1792 a.root-servers.net. nstld.verisign-grs.com. 2019031301 14400 7200 1209600 3600000
# refresh = 4h retry = 2h expire = 14d minimum = 41d 16h
soa_disk_acquired: 1563444176 # was 3m 14s ago
soa_disk: 6 1 3600000 1792 a.root-servers.net. nstld.verisign-grs.com. 2019031301 14400 7200 1209600 3600000
# refresh = 4h retry = 2h expire = 14d minimum = 41d 16h
soa_notify_acquired: 0
NSDXFRD2
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Milestone
Relationships
Development
Issue actions
You can’t perform that action at this time.