[ratelimits] can't trigger rate-limit

Irwin Tillman irwin at princeton.edu
Tue Jan 1 19:33:59 UTC 2013


> Perhaps it would help evolve a small configuration that works toward your actual configuration.  

Thanks for the suggestion.
I', able to see the same behavior (rate-limit does not seem to trigger)
with the same minimal config you used:

% cat /tmp/named.conf  

options {
   directory        "/tmp";
   pid-file         "pid";
   session-keyfile  "session.key";
   listen-on        port 8053 { 127.0.0.1; };
   rate-limit {
       responses-per-second 5;
   };
};
logging {
    channel rl {
        severity info;
        print-category yes; print-time yes; print-severity yes; file "rl-log";
    };
    category rate-limit { rl; };
};


# /usr/local/sbin/named -f -c /tmp/named.conf

%  repeat 10 dig @127.0.0.1 +short +tries=1 +time=3  -p 8053 rhyolite.com
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3
192.188.61.3

Repeating for larger repeat counts, and using queryperf to flood the server with higher volumes
also didn't trigger rate-limit.

# (kill named)


messages:

 named[13482]: starting BIND 9.9.2-vjs340.03-P1 -f -c /tmp/named.conf
 named[13482]: built with '--sysconfdir=/usr/local/etc' 'CC=cc' 'CFLAGS=-L/usr/local/lib -fast' 'LDFLAGS=-R/usr/local/lib'
 named[13482]: ----------------------------------------------------
 named[13482]: BIND 9 is maintained by Internet Systems Consortium,
 named[13482]: Inc. (ISC), a non-profit 501(c)(3) public-benefit 
 named[13482]: corporation.  Support and training for BIND 9 are 
 named[13482]: available at https://www.isc.org/support
 named[13482]: ----------------------------------------------------
 named[13482]: open: /usr/local/etc/rndc.key: file not found
 named[13482]: couldn't add command channel 127.0.0.1#953: file not found
 named[13482]: open: /usr/local/etc/rndc.key: file not found
 named[13482]: couldn't add command channel ::1#953: file not found
 named[13482]: all zones loaded
 named[13482]: running
 named[13482]: clients-per-query increased to 15
 named[13482]: exiting


% ls -l /tmp/rl-log 
-rw-r--r--   1 named    named          0 Jan  1 14:08 /tmp/rl-log

Platform: Solaris 10 SPARC

If there's other tests I should try, or more detailed logging output I should
collect, I'll be happy to do so.

Irwin Tillman


More information about the ratelimits mailing list