2 Zář
2024
2 Zář
'24
11:35
Hello Knot DNS users,
CZ.NIC has released Knot DNS 3.4.0!
This version brings DNS/XFR over TLS, DDNS over QUIC and TLS, continuous DNSSEC zone
validation,
XDP improvements, enhanced RRL, partially asynchronous processing of control commands, and
more.
See the changelog.
Today, Knot DNS 3.2 reached its end-of-life!
Changelog:
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v3.4.0/NEWS
Migration:
https://www.knot-dns.cz/docs/latest/html/migration.html#upgrade-3-3-x-to-3-…
Download:
https://www.knot-dns.cz/download/
Documentation:
https://www.knot-dns.cz/documentation/
Support:
https://www.knot-dns.cz/support/
Regards,
Daniel
17 Zář
17 Zář
18:49
New subject: mod-rrl crashes Knot DNS 3.4.0
Hi
I don't know if this is an issue with my configuration or a bug.
If I remove the configuration below, knot 3.4.0 starts up fine.
When I introduce this config, knot 3.4.0 crashes with OOM, a memory leak.
It runs fine on knot 3.3.9.
template[default].module = mod-rrl/default
mod-rrl.id = default
mod-rrl[default].rate-limit = 20
mod-rrl[default].slip = 1
What am I doing wrong or is it a bug?
I want to say that I am very content with knot, I've migrated from some
servers from powerdns to knot, and things are great.
I still run powerdns but primarily knot.
Kind regards
Dries Pattyn
20:42
New subject: mod-rrl crashes Knot DNS 3.4.0
template[default].module = mod-rrl/default
mod-rrl.id = default
mod-rrl[default].rate-limit = 20
mod-rrl[default].slip = 1
fwiw, my analogous config snippet is
- id: default
storage: /var/lib/knot/primary
semantic-checks: on
file: %s
global-module: mod-rrl/default
global-module: mod-cookies/default
randy
18 Zář
18 Zář
9:06
New subject: mod-rrl crashes Knot DNS 3.4.0
On Tue, 17 Sep 2024 13:42:26 -0700
Randy Bush <randy(a)psg.com> wrote:
fwiw, my analogous config snippet is
- id: default
storage: /var/lib/knot/primary
semantic-checks: on
file: %s
global-module: mod-rrl/default
global-module: mod-cookies/default
I see an issue here. See red warning box at
https://www.knot-dns.cz/docs/latest/singlehtml/index.html#cookies-dns-cooki…
You must load mod-cookies before mod-rrl for it to work. I'd use this
to make sure correct order is used:
global-module: [ mod-cookies/default, mod-rrl/default ]
--
Tuomo Soini <tis(a)foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>
15:05
New subject: mod-rrl crashes Knot DNS 3.4.0
- id:
default
storage: /var/lib/knot/primary
semantic-checks: on
file: %s
global-module: mod-rrl/default
global-module: mod-cookies/default
I see an issue here. See red warning box at
https://www.knot-dns.cz/docs/latest/singlehtml/index.html#cookies-dns-cooki…
You must load mod-cookies before mod-rrl for it to work. I'd use this
to make sure correct order is used:
global-module: [ mod-cookies/default, mod-rrl/default ]
5:46
New subject: mod-rrl crashes Knot DNS 3.4.0
Hi,
How do you install Knot? If you enable debug logging level, what do you see here `debug:
module 'mod-rrl/default', using ? implementation`?
Are you able to create a backtrace?
Daniel
On 9/17/24 20:49, Dries Pattyn via knot-dns-users wrote:
Hi
I don't know if this is an issue with my configuration or a bug.
If I remove the configuration below, knot 3.4.0 starts up fine.
When I introduce this config, knot 3.4.0 crashes with OOM, a memory leak.
It runs fine on knot 3.3.9.
template[default].module = mod-rrl/default
mod-rrl.id = default
mod-rrl[default].rate-limit = 20
mod-rrl[default].slip = 1
What am I doing wrong or is it a bug?
I want to say that I am very content with knot, I've migrated from some servers from
powerdns to knot, and things are great.
I still run powerdns but primarily knot.
Kind regards
Dries Pattyn
--
7:24
New subject: mod-rrl crashes Knot DNS 3.4.0
Ah, I overlooked the server was killed due to OOM. So backtrace doesn't make sense.
How many zones do you have? Note that every zone has its own mod-rrl instance! Could you
try using global-module instead of module?
Daniel
On 9/18/24 07:46, Daniel Salzman via knot-dns-users wrote:
Hi,
How do you install Knot? If you enable debug logging level, what do you see here `debug:
module 'mod-rrl/default', using ? implementation`?
Are you able to create a backtrace?
Daniel
On 9/17/24 20:49, Dries Pattyn via knot-dns-users wrote:
Hi
I don't know if this is an issue with my configuration or a bug.
If I remove the configuration below, knot 3.4.0 starts up fine.
When I introduce this config, knot 3.4.0 crashes with OOM, a memory leak.
It runs fine on knot 3.3.9.
template[default].module = mod-rrl/default
mod-rrl.id = default
mod-rrl[default].rate-limit = 20
mod-rrl[default].slip = 1
What am I doing wrong or is it a bug?
I want to say that I am very content with knot, I've migrated from some servers from
powerdns to knot, and things are great.
I still run powerdns but primarily knot.
Kind regards
Dries Pattyn
--
--
15:43
New subject: mod-rrl crashes Knot DNS 3.4.0
Hi Daniel
I have 3000 zones loaded.
I configured the module in global-module, but I have the same issue.
I've started knot in verbose mode, but that didnt point me in the right
direction either.
The server runs with 8GB memory, nothing else runs on it.
If you need more info, let me know.
2024-09-18T17:34:41+0200 debug: module 'mod-authsignal', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-cookies', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-dnsproxy', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-noudp', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-onlinesign', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-probe', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-queryacl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-rrl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-stats', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-synthrecord', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-whoami', loaded static
Killed
Kind regards
Dries Pattyn
16:04
New subject: mod-rrl crashes Knot DNS 3.4.0
Hi Dries,
At RIPE NCC, we run servers with over 3000 zones, and we definitely need
more than 8GB of RAM. In your case, you may have been hovering close to
the limit, and enabling the RRL module is pushing you over the edge.
Can you measure your RAM usage *before* enabling cookies and RRL?
Regards,
Anand
On 18/09/2024 17:43, Dries Pattyn via knot-dns-users wrote:
Hi Daniel
I have 3000 zones loaded.
I configured the module in global-module, but I have the same issue.
I've started knot in verbose mode, but that didnt point me in the right
direction either.
The server runs with 8GB memory, nothing else runs on it.
If you need more info, let me know.
2024-09-18T17:34:41+0200 debug: module 'mod-authsignal', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-cookies', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-dnsproxy', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-noudp', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-onlinesign', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-probe', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-queryacl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-rrl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-stats', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-synthrecord', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-whoami', loaded static
Killed
Kind regards
Dries Pattyn
--
17:39
New subject: mod-rrl crashes Knot DNS 3.4.0
Are you sure there was just one mod-rrl instance (global-module)?
Based on https://www.knot-dns.cz/docs/latest/singlehtml/index.html#table-size one module
instance consumes approximately 8M.
There are no additional dynamic allocations in the module.
I see the module is statically linked. Do you compile Knot on your own?
BTW, how do you know it leaks memory?
Daniel
On 9/18/24 17:43, Dries Pattyn via knot-dns-users wrote:
Hi Daniel
I have 3000 zones loaded.
I configured the module in global-module, but I have the same issue.
I've started knot in verbose mode, but that didnt point me in the right direction
either.
The server runs with 8GB memory, nothing else runs on it.
If you need more info, let me know.
2024-09-18T17:34:41+0200 debug: module 'mod-authsignal', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-cookies', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-dnsproxy', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-noudp', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-onlinesign', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-probe', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-queryacl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-rrl', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-stats', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-synthrecord', loaded static
2024-09-18T17:34:41+0200 debug: module 'mod-whoami', loaded static
Killed
Kind regards
Dries Pattyn
--
18:23
New subject: mod-rrl crashes Knot DNS 3.4.0
Hi Daniel, Anand
I am running knot from the copr fedora repo.
I managed to get knot 3.4.0 running with mod-rrl in global-module.
I had mod-rrl mentioned twice, in global-module and once in module. I
made a mistake there.
I did some further tests with 3000 zones.
Knot version 3.3.9 in with mod-rrl global-module uses 140MB memory.
Knot version 3.3.9 in with mod-rrl in module uses 200MB memory.
Knot version 3.4.0 in with mod-rrl in global-module uses 170MB memory.
Knot version 3.4.0 with mod-rrl in module crashes with out of memory.
(it uses more then 7GB memory before it crashes)
I understand that I should run mod-rrl in global-module, it seems more
evident.
I think it is resolved now, thank you for your help.
Thank you.
Kind regards
Dries Pattyn
On 18/09/2024 19:39, Daniel Salzman wrote:
Are you sure there was just one mod-rrl instance
(global-module)?
Based on
https://www.knot-dns.cz/docs/latest/singlehtml/index.html#table-size
one module instance consumes approximately 8M.
There are no additional dynamic allocations in the module.
I see the module is statically linked. Do you compile Knot on your own?
BTW, how do you know it leaks memory?
Daniel
On 9/18/24 17:43, Dries Pattyn via knot-dns-users wrote:
> Hi Daniel
>
> I have 3000 zones loaded.
> I configured the module in global-module, but I have the same issue.
>
> I've started knot in verbose mode, but that didnt point me in the
> right direction either.
> The server runs with 8GB memory, nothing else runs on it.
>
> If you need more info, let me know.
>
> 2024-09-18T17:34:41+0200 debug: module 'mod-authsignal', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-cookies', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-dnsproxy', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-noudp', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-onlinesign', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-probe', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-queryacl', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-rrl', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-stats', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-synthrecord', loaded static
> 2024-09-18T17:34:41+0200 debug: module 'mod-whoami', loaded static
> Killed
>
> Kind regards
> Dries Pattyn
>
> --
241
days inactive
257
days old
10 comments
5 participants
participants (5)
-
Anand Buddhdev -
Daniel Salzman -
Dries Pattyn -
Randy Bush -
Tuomo Soini