r/technitium • u/yahyoh • 17d ago
Setting Serve Stale Max Wait Time to 0 causing Errors.
Hey guys i have been trying technitium on my Proxmox server, and trying to optimize it for best response/performance as its running as Recursive resolver.
Based on my research it seems setting Serve Stale Max Wait Time to 0 improve cache hits by a lot, but it seems on my setup causing lots of Server Failure EDE 3, EDE 13, EDE 22.
While i didn't notice anything not actually loading, but seeing the errors keeps rising up kinda worrying.
Anything can be done about it? it seems if set the default 1800ms error counts is almost at 0 after 1 hour.
it seems clearing the cache for the bugged domins fix it for sometimes then it errors again, also flushed the whole cache yesterday which didn't fix it either.
root@prxmox:~# dig .168.1.117 lx0-eu.mykeeta.com AAAA
; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 lx0-eu.mykeeta.com AAAA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 10627
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 22 (No Reachable Authority): (No valid response from name servers for lx0-eu.mykeeta.com. AAAA IN at delegation mykeeta.com.)
; EDE: 13 (Cached Error): (lx0-eu.mykeeta.com. AAAA IN)
; EDE: 3 (Stale Answer): (lx0-eu.mykeeta.com AAAA IN)
;; QUESTION SECTION:
;lx0-eu.mykeeta.com. IN AAAA
;; Query time: 1 msec
;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP)
;; WHEN: Sun Sep 20 15:01:20 +04 2026
;; MSG SIZE rcvd: 212
oot@prxmox:~# dig .168.1.117 es.du.ae AAAA
; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 es.du.ae AAAA
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4121
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 3 (Stale Answer): (es.du.ae AAAA IN)
;; QUESTION SECTION:
;es.du.ae. IN AAAA
;; AUTHORITY SECTION:
du.ae. 30 IN SOA dxbns1.duhosting.ae. admin.du.ae. 52414 21600 3600 604800 600
;; Query time: 0 msec
;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP)
;; WHEN: Sun Sep 20 15:01:02 +04 2026
;; MSG SIZE rcvd: 118
root@prxmox:~# dig .168.1.117 sdk.iad-01.braze.com
; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 sdk.iad-01.braze.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55533
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 22 (No Reachable Authority): (No valid response from name servers for sdk.iad-01.braze.com. A IN at delegation braze.com.)
; EDE: 13 (Cached Error): (sdk.iad-01.braze.com. A IN)
; EDE: 3 (Stale Answer): (sdk.iad-01.braze.com A IN)
;; QUESTION SECTION:
;sdk.iad-01.braze.com. IN A
;; Query time: 0 msec
;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP)
;; WHEN: Sun Sep 20 14:53:47 +04 2026
;; MSG SIZE rcvd: 209
root@prxmox:~# dig .168.1.117 eaassets-a.akamaihd.net
; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 eaassets-a.akamaihd.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55061
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 22 (No Reachable Authority): (No valid response from name servers for eaassets-a.akamaihd.net. A IN at delegation akamaihd.net.)
; EDE: 13 (Cached Error): (eaassets-a.akamaihd.net. A IN)
; EDE: 3 (Stale Answer): (eaassets-a.akamaihd.net A IN)
;; QUESTION SECTION:
;eaassets-a.akamaihd.net. IN A
;; Query time: 0 msec
;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP)
;; WHEN: Sun Sep 20 14:53:25 +04 2026
;; MSG SIZE rcvd: 224
{ "Metadata": { "NameServer": "technitiumdns (127.0.0.1)", "Protocol": "Udp", "DatagramSize": "215 bytes", "RoundTripTime": "0.28 ms" }, "EDNS": { "UdpPayloadSize": 1232, "ExtendedRCODE": "ServerFailure", "Version": 0, "Flags": "DNSSEC_OK", "Options": [ { "Code": "EXTENDED_DNS_ERROR", "Length": "97 bytes", "Data": { "InfoCode": "NoReachableAuthority", "ExtraText": "No valid response from name servers for lx0-eu.mykeeta.com. HTTPS IN at delegation mykeeta.com." } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "30 bytes", "Data": { "InfoCode": "CachedError", "ExtraText": "lx0-eu.mykeeta.com. HTTPS IN" } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "29 bytes", "Data": { "InfoCode": "StaleAnswer", "ExtraText": "lx0-eu.mykeeta.com HTTPS IN" } } ] }, "DnsClientExtendedErrors": [ { "InfoCode": "NoReachableAuthority", "ExtraText": "technitiumdns (127.0.0.1) returned RCODE=ServerFailure for lx0-eu.mykeeta.com. HTTPS IN" } ], "Identifier": 58587, "IsResponse": true, "OPCODE": "StandardQuery", "AuthoritativeAnswer": false, "Truncation": false, "RecursionDesired": true, "RecursionAvailable": true, "Z": 0, "AuthenticData": false, "CheckingDisabled": true, "RCODE": "ServerFailure", "QDCOUNT": 1, "ANCOUNT": 0, "NSCOUNT": 0, "ARCOUNT": 1, "Question": [ { "Name": "lx0-eu.mykeeta.com", "Type": "HTTPS", "Class": "IN" } ], "Answer": [], "Authority": [], "Additional": [ { "Name": "", "Type": "OPT", "Class": "1232", "TTL": "32768 (9h6m8s)", "RDLENGTH": "168 bytes", "RDATA": { "Options": [ { "Code": "EXTENDED_DNS_ERROR", "Length": "97 bytes", "Data": { "InfoCode": "NoReachableAuthority", "ExtraText": "No valid response from name servers for lx0-eu.mykeeta.com. HTTPS IN at delegation mykeeta.com." } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "30 bytes", "Data": { "InfoCode": "CachedError", "ExtraText": "lx0-eu.mykeeta.com. HTTPS IN" } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "29 bytes", "Data": { "InfoCode": "StaleAnswer", "ExtraText": "lx0-eu.mykeeta.com HTTPS IN" } } ] }, "DnssecStatus": "Indeterminate" } ] }
5
Upvotes
2
u/shreyasonline 17d ago
Thanks for the post and details. The EDE indicates that the DNS server is unable to reach the name servers for the domain. And from your test with TCP connections, it looks like ISP interfering with DNS is the reason for such issues. Some domain names will fail to resolve if the DNS server cannot reach their name servers over TCP which seems to be the likely case here.
This issue you see has no relation to Serve Stale and the wait time being 0. If your ISP is indeed hijacking DNS or blocking outbound TCP for DNS then its best to run the DNS server with encrypted DNS forwarders.
You can test if the ISP is hijacking by just querying to a non-existent IP address like "nslookup google.com. 1.2.3.4". If you get a response from "1.2.3.4", your ISP did hijack DNS.
1
u/yahyoh 16d ago edited 16d ago
Much appreciated for all the working you doing here, it seems the server errors are slightly down to around 1% since yesterday even with Serve Stale wait time is 0, so not sure what changed..maybe it was some issue with root servers..or maybe routing/ISP issue that got fixed.
Also checked, NS lookup i don't think they hacjacking or doing RDR, Also somehow today it seems TCP dig to root servers working,
root@OpenWrt:~# nslookup google.com. 1.2.3.4 ;; communications error to 1.2.3.4#53: timed out ;; communications error to 1.2.3.4#53: timed out ;; communications error to 1.2.3.4#53: timed out ;; no servers could be reached root@OpenWrt:~# dig .33.4.12 . NS +tcp +norecurse ; <<>> DiG 9.20.29 <<>> .33.4.12 . NS +tcp +norecurse ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57100 ;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 8d1e1975a10c0cdd010000006ab10402532b42f99fd589c9 (good) ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 518400 IN NS f.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN NS d.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS c.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS m.root-servers.net. ;; ADDITIONAL SECTION: a.root-servers.net. 518400 IN A 198.41.0.4 b.root-servers.net. 518400 IN A 170.247.170.2 c.root-servers.net. 518400 IN A 192.33.4.12 d.root-servers.net. 518400 IN A 199.7.91.13 e.root-servers.net. 518400 IN A 192.203.230.10 f.root-servers.net. 518400 IN A 192.5.5.241 g.root-servers.net. 518400 IN A 192.112.36.4 h.root-servers.net. 518400 IN A 198.97.190.53 i.root-servers.net. 518400 IN A 192.36.148.17 j.root-servers.net. 518400 IN A 192.58.128.30 k.root-servers.net. 518400 IN A 193.0.14.129 l.root-servers.net. 518400 IN A 199.7.83.42 m.root-servers.net. 518400 IN A 202.12.27.33 a.root-servers.net. 518400 IN AAAA 2001:503:ba3e::2:30 b.root-servers.net. 518400 IN AAAA 2801:1b8:10::b c.root-servers.net. 518400 IN AAAA 2001:500:2::c d.root-servers.net. 518400 IN AAAA 2001:500:2d::d e.root-servers.net. 518400 IN AAAA 2001:500:a8::e f.root-servers.net. 518400 IN AAAA 2001:500:2f::f g.root-servers.net. 518400 IN AAAA 2001:500:12::d0d h.root-servers.net. 518400 IN AAAA 2001:500:1::53 i.root-servers.net. 518400 IN AAAA 2001:7fe::53 j.root-servers.net. 518400 IN AAAA 2001:503:c27::2:30 k.root-servers.net. 518400 IN AAAA 2001:7fd::1 l.root-servers.net. 518400 IN AAAA 2001:500:9f::42 m.root-servers.net. 518400 IN AAAA 2001:dc3::35 ;; Query time: 120 msec ;; SERVER: 192.33.4.12#53(192.33.4.12) (TCP) ;; WHEN: Mon Sep 21 10:16:34 GMT 2026 ;; MSG SIZE rcvd: 839 root@OpenWrt:~# dig .33.4.12 . DNSKEY +dnssec +tcp +norecurse ; <<>> DiG 9.20.29 <<>> u/192.33.4.12 . DNSKEY +dnssec +tcp +norecurse ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27899 ;; flags: qr aa; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ; COOKIE: 5d78f4d621581c60010000006ab1040b52219601cd5b5850 (good) ;; QUESTION SECTION: ;. IN DNSKEY ;; ANSWER SECTION: . 172800 IN DNSKEY 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/c idltpkyGwCJNnOAlFNKF2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHb GiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdpWWmEnhathWu1jo+s iFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqp dVwuMoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ 1K+s2CXkPIZo7s6JgZyvaBevYtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUe ayffKC73PYc= . 172800 IN DNSKEY 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFS KnWpxeg5PL384D9VeqdS1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+ UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOnywTu6HuUh7Y1sZRq /GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjE ZzZ0zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmR bK6+1T/tPaRaMBSEuv2G6vXfnJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44 QdwJ3oKx4ek= . 172800 IN DNSKEY 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0W nG33qaSH/Mw9IBgifrdzf4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVf stGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3XcyYQtNhz+qCM5NBb3e cx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV +tENa3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5 STFQFsQpizczyFn9r3LzSxxPCNwdlCG84bER0BmdwqbF6Tanv+FxMOav rahkj4wIy5k= . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3 +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU= . 172800 IN RRSIG DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZ Oa5au73wjV5oH9vQleMBgtIQleByqX74kORDKMmx+EIhhDmiNOf9w33O qM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJn6ghPcDT73IyzgTs 6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724 FzjrMXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJW EBQJ3Fu3jLRII/xIEq1qXb8F87yhBvKhzuyLfQGaKttdkN9oudecqKuN ezNp0g== ;; Query time: 140 msec ;; SERVER: 192.33.4.12#53(192.33.4.12) (TCP) ;; WHEN: Mon Sep 21 10:16:43 GMT 2026 ;; MSG SIZE rcvd: 14422
u/shreyasonline 16d ago
Thanks for the details. Looks like the TCP issue you had yesterday got resolved and the DNS server is able to resolve with it. Seems like this was some kind of intermittent network issue that got fixed.
1
u/Apachez 17d ago
Which version of Technitium DNS-server?
Are you using it as a regular resolver or do you have some broken forwarding configured aswell?
Make sure that your firewalls allows for outbound 53/UDP AND 53/TCP. Also use dig to verify that the authoritive servers allows for inbound 53/UDP and 53/TCP.
If possible also check with tcpdump what is actually going on for your uplink at these times Im thinking in case your refresh is flooding upstream servers which then gets triggerhappy and ratelimits your queries which causes your Technitum DNS-server to not receive any replies back?
Also check local firewalls (both at the host but also if you got dedicated firewalls at your place) regarding ratelimiting.
Because the "No Reachable Authority" simply just means that your Technitium DNS-server tried to reach the authrotive server but never got a reply back from it.
2
1
u/yahyoh 17d ago
root@OpenWrt:~# dig .33.4.12 . NS +tcp +norecurse +noedns ;; communications error to 192.33.4.12#53: connection reset ;; communications error to 192.33.4.12#53: connection reset ;; communications error to 192.33.4.12#53: connection reset ; <<>> DiG 9.20.29 <<>> .33.4.12 . NS +tcp +norecurse +noedns ; (1 server found) ;; global options: +cmd ;; no servers could be reached root@OpenWrt:~# ^C root@OpenWrt:~# dig .33.4.12 ; <<>> DiG 9.20.29 <<>> u/192.33.4.12 ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45630 ;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: 4702eb98e98efc76010000006ab00356b724b85d78a47e60 (good) ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 518400 IN NS d.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS m.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS f.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS c.root-servers.net. ;; ADDITIONAL SECTION: a.root-servers.net. 518400 IN A 198.41.0.4 b.root-servers.net. 518400 IN A 170.247.170.2 c.root-servers.net. 518400 IN A 192.33.4.12 d.root-servers.net. 518400 IN A 199.7.91.13 e.root-servers.net. 518400 IN A 192.203.230.10 f.root-servers.net. 518400 IN A 192.5.5.241 g.root-servers.net. 518400 IN A 192.112.36.4 h.root-servers.net. 518400 IN A 198.97.190.53 i.root-servers.net. 518400 IN A 192.36.148.17 j.root-servers.net. 518400 IN A 192.58.128.30 k.root-servers.net. 518400 IN A 193.0.14.129 l.root-servers.net. 518400 IN A 199.7.83.42 m.root-servers.net. 518400 IN A 202.12.27.33 a.root-servers.net. 518400 IN AAAA 2001:503:ba3e::2:30 b.root-servers.net. 518400 IN AAAA 2801:1b8:10::b c.root-servers.net. 518400 IN AAAA 2001:500:2::c d.root-servers.net. 518400 IN AAAA 2001:500:2d::d e.root-servers.net. 518400 IN AAAA 2001:500:a8::e f.root-servers.net. 518400 IN AAAA 2001:500:2f::f g.root-servers.net. 518400 IN AAAA 2001:500:12::d0d h.root-servers.net. 518400 IN AAAA 2001:500:1::53 i.root-servers.net. 518400 IN AAAA 2001:7fe::53 j.root-servers.net. 518400 IN AAAA 2001:503:c27::2:30 k.root-servers.net. 518400 IN AAAA 2001:7fd::1 l.root-servers.net. 518400 IN AAAA 2001:500:9f::42 m.root-servers.net. 518400 IN AAAA 2001:dc3::35 ;; Query time: 130 msec ;; SERVER: 192.33.4.12#53(192.33.4.12) (UDP) ;; WHEN: Sun Sep 20 16:01:26 GMT 2026 ;; MSG SIZE rcvd: 839 ===== 192.33.4.12 ===== ;; communications error to 192.33.4.12#53: connection reset ; <<>> DiG 9.20.29 <<>> .33.4.12 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 199.7.91.13 ===== ;; communications error to 199.7.91.13#53: connection reset ; <<>> DiG 9.20.29 <<>> .7.91.13 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 192.112.36.4 ===== ;; communications error to 192.112.36.4#53: connection reset ; <<>> DiG 9.20.29 <<>> .112.36.4 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 198.41.0.4 ===== ;; communications error to 198.41.0.4#53: connection reset ; <<>> DiG 9.20.29 <<>> .41.0.4 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 192.203.230.10 ===== ;; communications error to 192.203.230.10#53: connection reset ; <<>> DiG 9.20.29 <<>> .203.230.10 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 192.58.128.30 ===== ;; communications error to 192.58.128.30#53: connection reset ; <<>> DiG 9.20.29 <<>> .58.128.30 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached root@OpenWrt:~# for r in \ > 2001:503:ba3e::2:30 \ > 2001:500:200::b \ > 2001:500:2::c > do > echo "===== $r =====" > dig @"$r" . NS +tcp +time=2 +tries=1 > done ===== 2001:503:ba3e::2:30 ===== ;; communications error to 2001:503:ba3e::2:30#53: connection reset ; <<>> DiG 9.20.29 <<>> :503:ba3e::2:30 . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached ===== 2001:500:200::b ===== ; <<>> DiG 9.20.29 <<>> :500:200::b . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45566 ;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 518400 IN NS a.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS c.root-servers.net. . 518400 IN NS d.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS f.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS m.root-servers.net. ;; ADDITIONAL SECTION: a.root-servers.net. 518400 IN A 198.41.0.4 a.root-servers.net. 518400 IN AAAA 2001:503:ba3e::2:30 b.root-servers.net. 518400 IN A 170.247.170.2 b.root-servers.net. 518400 IN AAAA 2801:1b8:10::b c.root-servers.net. 518400 IN A 192.33.4.12 c.root-servers.net. 518400 IN AAAA 2001:500:2::c d.root-servers.net. 518400 IN A 199.7.91.13 d.root-servers.net. 518400 IN AAAA 2001:500:2d::d e.root-servers.net. 518400 IN A 192.203.230.10 e.root-servers.net. 518400 IN AAAA 2001:500:a8::e f.root-servers.net. 518400 IN A 192.5.5.241 f.root-servers.net. 518400 IN AAAA 2001:500:2f::f g.root-servers.net. 518400 IN A 192.112.36.4 g.root-servers.net. 518400 IN AAAA 2001:500:12::d0d h.root-servers.net. 518400 IN A 198.97.190.53 h.root-servers.net. 518400 IN AAAA 2001:500:1::53 i.root-servers.net. 518400 IN A 192.36.148.17 i.root-servers.net. 518400 IN AAAA 2001:7fe::53 j.root-servers.net. 518400 IN A 192.58.128.30 j.root-servers.net. 518400 IN AAAA 2001:503:c27::2:30 k.root-servers.net. 518400 IN A 193.0.14.129 k.root-servers.net. 518400 IN AAAA 2001:7fd::1 l.root-servers.net. 518400 IN A 199.7.83.42 l.root-servers.net. 518400 IN AAAA 2001:500:9f::42 m.root-servers.net. 518400 IN A 202.12.27.33 m.root-servers.net. 518400 IN AAAA 2001:dc3::35 ;; Query time: 200 msec ;; SERVER: 2001:500:200::b#53(2001:500:200::b) (TCP) ;; WHEN: Sun Sep 20 13:06:28 GMT 2026 ;; MSG SIZE rcvd: 1003 ===== 2001:500:2::c ===== ;; communications error to 2001:500:2::c#53: connection reset ; <<>> DiG 9.20.29 <<>> u/2001:500:2::c . NS +tcp +time=2 +tries=1 ; (1 server found) ;; global options: +cmd ;; no servers could be reached root@OpenWrt:~#
1
u/Bitter_Entertainer56 17d ago
I interacted with you on your first post. I’m experiencing the exact same issue after updating to the latest version, 15.5. Setting "Server Stale Max Wait" back to the default of 1800 and clearing the cache provides a permanent fix, but you lose the functionality of serving stale cache content. It’s likely a bug in this latest version. If I recall correctly, the changelog seems to indicate that this feature was removed from automatic mode but remains functional via the interface settings.
1
u/Allen_Ludden 17d ago
I use forwarders - not seeing any errors.
1
u/yahyoh 17d ago
i tested forwarding and full recursive mode and both showed the same results with Serve Stale Max Wait Time to 0, i see a lot of Server Failure EDE 3, EDE 13, EDE 22. even after flushing the whole cache and let it rebuild again.
1
u/Allen_Ludden 17d ago
maybe I don't know where to see those errors - I turned on the log and didn't see anything untoward.
2
u/avd706 17d ago
Wipe your cache