Здравствуйте, так как не могу найти не в англонете не в рунете решение проблемы, то пишу сюда.
Проблема в следующем:
Имеется сеть 54 компьютера, если я прихожу рано утром пока ещё никого нету, запросы просто отлично летят и задержка стандартная для омска и этого провайдера, доходит дело до 9 часов утра, всё запросы до гугля 1000-1200, ну и не только и для других тоже сайтов.
Загрузка канала почти всегда полная, но вижу по стату, что народ сёрфит и пользуется мессенджерами. Думаю что из низкой пропускной способности многократно возрастает кол-во запросов к Bind и в связи с этим и появляются такие проблемы.
UPD.Некоторая странность: поначалу всё было отлично, но прошло три месяца и начало вот так вот как то всё работать, ещё на сервере модель доступа к инету такая client ->tranparent-squid->havp->internet.
Сервер:
на борту
2gb регистерной памяти
4х-ядерный Xeon
hdd - raid 5(hardware)
Ubuntu 9.10 (2.6.31-21-server #59-Ubuntu SMP Wed Mar 24 08:26:06 UTC 2010 x86_64 GNU/Linux)
канал инета - 64 к/байта грешу на него.
named -v = BIND 9.6.1-P2
Теперь приведу примеры конфига Bind:
named.conf
cat /etc/bind/named.conf
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/named.conf.oniipi.su";
named.conf.options
options {
directory "/var/cache/bind";
allow-recursion { 192.168.7.0/24; localhost;};
allow-query-cache { 192.168.7.0/24; localhost; };
version "Made in oniipi";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forward only;
forwarders {
77.221.200.2;//dns'ы провайдер
77.221.203.2;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
listen-on { 192.168.7.0/24; 10.10.10.0/24; localhost; 127.0.0.1; };
};
named.conf.local
logging {
channel default_syslog {
file "/var/log/bind/named-default.log";
print-category yes;
print-severity yes;
print-time yes;
};
channel update_debug {
file "/var/log/bind/named-update.log";
print-category yes;
print-severity yes;
print-time yes;
};
channel security_info {
file "/var/log/bind/named-auth.log";
print-category yes;
print-severity yes;
print-time yes;
};
category default {
default_syslog;
};
category update {
update_debug;
};
category security {
security_info;
};
};
resolv.conf
nameserver 127.0.0.1
Лог запуска
May 19 09:47:47 avrora named[2894]: starting BIND 9.6.1-P2 -u bind
May 19 09:47:47 avrora named[2894]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-dlz-postgres=no' '--with-dlz-mysql=no' '--with-dlz-bdb=yes' '--with-dlz-filesystem=yes' '--with-dlz-ldap=yes' '--with-dlz-stub=yes' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2' 'FFLAGS=-g -O2'
May 19 09:47:47 avrora named[2894]: adjusted limit on open files from 1024 to 1048576
May 19 09:47:47 avrora named[2894]: found 4 CPUs, using 4 worker threads
May 19 09:47:47 avrora named[2894]: using up to 4096 sockets
May 19 09:47:47 avrora named[2894]: loading configuration from '/etc/bind/named.conf'
May 19 09:47:47 avrora named[2894]: using default UDP/IPv4 port range: [1024, 65535]
May 19 09:47:47 avrora named[2894]: using default UDP/IPv6 port range: [1024, 65535]
May 19 09:47:47 avrora named[2894]: listening on IPv6 interfaces, port 53
May 19 09:47:47 avrora named[2894]: listening on IPv4 interface lo, 127.0.0.1#53
May 19 09:47:47 avrora named[2894]: listening on IPv4 interface eth0, 77.221.204.142#53
May 19 09:47:47 avrora named[2894]: listening on IPv4 interface eth1, 192.168.7.102#53
May 19 09:47:47 avrora named[2894]: listening on IPv4 interface tap0, 10.10.10.1#53
May 19 09:47:47 avrora named[2894]: automatic empty zone: 254.169.IN-ADDR.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: D.F.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 8.E.F.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: 9.E.F.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: A.E.F.IP6.ARPA
May 19 09:47:47 avrora named[2894]: automatic empty zone: B.E.F.IP6.ARPA
May 19 09:47:47 avrora named[2894]: command channel listening on 127.0.0.1#953
May 19 09:47:47 avrora named[2894]: command channel listening on ::1#953
May 19 09:48:50 avrora xinetd[2833]: Exiting...
May 19 09:49:06 avrora xinetd[4812]: Reading included configuration file: /etc/xinetd.d/chargen [file=/etc/xinetd.conf] [line=14]
May 19 09:49:06 avrora xinetd[4812]: Reading included configuration file: /etc/xinetd.d/daytime [file=/etc/xinetd.d/daytime] [line=28]
May 19 09:49:06 avrora xinetd[4812]: Reading included configuration file: /etc/xinetd.d/discard [file=/etc/xinetd.d/discard] [line=26]
May 19 09:49:06 avrora xinetd[4812]: Reading included configuration file: /etc/xinetd.d/echo [file=/etc/xinetd.d/echo] [line=25]
May 19 09:49:06 avrora xinetd[4812]: Reading included configuration file: /etc/xinetd.d/proftpd [file=/etc/xinetd.d/proftpd] [line=26]
May 19 09:49:06 avrora xinetd[4812]: attribute bind expects 1 values and 2 values were specified [file=/etc/xinetd.d/proftpd] [line=12]
May 19 09:49:06 avrora xinetd[4812]: removing duplicate service ftp [file=/etc/inetd.conf] [line=3]
May 19 09:49:06 avrora xinetd[4812]: removing chargen
May 19 09:49:06 avrora xinetd[4812]: removing chargen
May 19 09:49:06 avrora xinetd[4812]: removing daytime
May 19 09:49:06 avrora xinetd[4812]: removing daytime
May 19 09:49:06 avrora xinetd[4812]: removing discard
May 19 09:49:06 avrora xinetd[4812]: removing discard
May 19 09:49:06 avrora xinetd[4812]: removing echo
May 19 09:49:06 avrora xinetd[4812]: removing echo
May 19 09:49:06 avrora xinetd[4812]: xinetd Version 2.3.14 started with libwrap loadavg options compiled in.
May 19 09:49:06 avrora xinetd[4812]: Started working: 1 available service
May 19 09:49:36 avrora ntpd[2311]: time reset -0.263106 s
May 19 09:57:47 avrora named[17088]: starting BIND 9.6.1-P2 -u bind
May 19 09:57:47 avrora named[17088]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-dlz-postgres=no' '--with-dlz-mysql=no' '--with-dlz-bdb=yes' '--with-dlz-filesystem=yes' '--with-dlz-ldap=yes' '--with-dlz-stub=yes' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2' 'FFLAGS=-g -O2'
May 19 09:57:47 avrora named[17088]: adjusted limit on open files from 1024 to 1048576
May 19 09:57:47 avrora named[17088]: found 4 CPUs, using 4 worker threads
May 19 09:57:47 avrora named[17088]: using up to 4096 sockets
May 19 09:57:47 avrora named[17088]: loading configuration from '/etc/bind/named.conf'
May 19 09:57:47 avrora named[17088]: /etc/bind/named.conf.options:16: 'forward' redefined near 'forward'
May 19 09:57:47 avrora named[17088]: loading configuration: already exists
May 19 09:57:47 avrora named[17088]: exiting (due to fatal error)
May 19 09:58:18 avrora named[17584]: starting BIND 9.6.1-P2 -u bind
May 19 09:58:18 avrora named[17584]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-dlz-postgres=no' '--with-dlz-mysql=no' '--with-dlz-bdb=yes' '--with-dlz-filesystem=yes' '--with-dlz-ldap=yes' '--with-dlz-stub=yes' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS=' 'CXXFLAGS=-g -O2' 'FFLAGS=-g -O2'
May 19 09:58:18 avrora named[17584]: adjusted limit on open files from 1024 to 1048576
May 19 09:58:18 avrora named[17584]: found 4 CPUs, using 4 worker threads
May 19 09:58:18 avrora named[17584]: using up to 4096 sockets
May 19 09:58:18 avrora named[17584]: loading configuration from '/etc/bind/named.conf'
May 19 09:58:18 avrora named[17584]: using default UDP/IPv4 port range: [1024, 65535]
May 19 09:58:18 avrora named[17584]: using default UDP/IPv6 port range: [1024, 65535]
May 19 09:58:18 avrora named[17584]: listening on IPv6 interfaces, port 53
May 19 09:58:18 avrora named[17584]: listening on IPv4 interface lo, 127.0.0.1#53
May 19 09:58:18 avrora named[17584]: listening on IPv4 interface eth0, 77.221.204.142#53
May 19 09:58:18 avrora named[17584]: listening on IPv4 interface eth1, 192.168.7.102#53
May 19 09:58:18 avrora named[17584]: listening on IPv4 interface tap0, 10.10.10.1#53
May 19 09:58:18 avrora named[17584]: command channel listening on 127.0.0.1#953
May 19 09:58:18 avrora named[17584]: command channel listening on ::1#953
May 19 09:58:40 avrora ntpd[2311]: synchronized to 194.149.67.130, stratum 2
May 19 09:59:46 avrora ntpd[2311]: kernel time sync status change 2001
Пинги - ya.ru(стандартный пинг 73мс-80мс)
ping ya.ru
PING ya.ru (77.88.21.3) 56(84) bytes of data.
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=1 ttl=54 time=612 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=2 ttl=54 time=149 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=3 ttl=54 time=411 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=4 ttl=54 time=124 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=5 ttl=54 time=344 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=6 ttl=54 time=148 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=7 ttl=54 time=698 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=8 ttl=54 time=786 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=9 ttl=54 time=292 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=10 ttl=54 time=475 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=11 ttl=54 time=551 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=12 ttl=54 time=414 ms
64 bytes from www.yandex.ru (77.88.21.3): icmp_seq=13 ttl=54 time=96.7 ms
^C
--- ya.ru ping statistics ---
13 packets transmitted, 13 received, 0% packet loss, time 12000ms
rtt min/avg/max/mdev = 96.765/392.815/786.999/218.493 ms
Заранее спасибо
