eyJhb changed the topic of #nixos-on-your-router to: NixOS on your Router || https://logs.nix.samueldr.com/nixos-on-your-router
srk has quit [Remote host closed the connection]
srk has joined #nixos-on-your-router
eyJhb has joined #nixos-on-your-router
<eyJhb> Lately I have been getting DNS lookups that take 3-4 secounds using UNBOUND, this isn't normal, right?
<andi-> sounds wrong
<andi-> I've had no problems here
<andi-> eyJhb: did you check the unbound logs?
<eyJhb> not yet
<eyJhb> Is `;; Query time: 832 msec` too much as well andi- ?
<andi-> Depends on what you are querying and what it has queried before that
<andi-> If it has to do the entire DNSSEC + root zone dance that is to be expected
<eyJhb> `dig mobilepay.dk` seems a little much
<andi-> is it configured as a recursive resolver or does it just forward?
<eyJhb> Recursive
<andi-> Try tcpdump'ing what it does
<andi-> maybe somewhere on the path packets are dropped
<andi-> and it has to retry
<eyJhb> andi-: I might do that tomorrow when I am knees deep in NIxOS anyways :D
<betawaffle> eyJhb: I've been getting slow DNS lookups sporadically since I switched to a DNS server on my router (not unbound)
<betawaffle> but no, it's not supposed to be that way
<eyJhb> betawaffle: Mine just happened all of the sudden :( Have used unbound for 1+ year or so
<hexa-> that happens when you need to recurse and you are slow to reach some authoritative servers
<hexa-> dns is fast because it is cached at every layer
<eyJhb> I think it has something todo with a network change out here where I live. It started happening after they did some switch maintanence stuff
<hexa-> when you are recursing completely on you own you have fewer precached domains
<eyJhb> But it was a sudden change for me, like I have never noticed it before, but now new pages are noticebly (?) slow.
<eyJhb> I.e. I get the 4s lookup often
<hexa-> you can configure unbound to to prefetch records
<hexa-> that keeps popular records cached and refreshed
<hexa-> NinjaTrappeur: https://w1.fi/security/2020-2/
<hexa-> went live 11m ago :D
<hexa-> > wpa_supplicant v1.0-v2.9 with CONFIG_P2P build option enabled
<{^_^}> error: syntax error, unexpected WITH, expecting ')', at (string):471:26
<hexa-> we didn't enable CONFIG_P2P, but maybe it is default … checking
<hexa-> defconfig
<hexa-> 506:CONFIG_P2P=y