Есть работающий как кэширующий DNS Bind 9 на Debian 5.0. Перенёс эту конфигурацию (перетащил конфиги) на новый сервер на Debian 9.7. Поставилась версия BIND 9.10.3-P4-Debian DNS очень странно работает. То резолвит за пару милисекунд всё, то тупит по секунд 20 и иногда вообще выкидывает ошибку в стиле - Your request could not be processed because an error occurred contacting the DNS server. The DNS server may be temporarily unavailable, or there could be a network problem. когда с браузера лезешь через него куда то.

На данный момент конфиг такой -

options {
	directory "/var/cache/bind";

allow-query {127.0.0.1/8; 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; 91.194.64.0/23; };
// allow-query-cache { any; }
allow-recursion {127.0.0.1/8; 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; 91.194.64.0/23; };
allow-transfer { 212.5.66.14; 212.15.127.1; 195.128.64.3; 212.5.64.43; };
forward first;
forwarders { 212.5.66.14; 195.128.64.3; 212.5.64.43; 212.15.127.1; 212.15.122.253; };
//forwarders { 8.8.8.8; 8.8.4.4; };


fetch-glue no;
query-source address * port 53;


	auth-nxdomain no;    # conform to RFC1035
	listen-on-v6 { none; };
// allow-notimy {none;};
};

в resolv.conf стоит 127.0.0.1

Вот что ещё выдаёт проверка на https://dnsflagday.net/ : Serious problem detected!

dns=timeout edns=timeout edns1=timeout edns@512=timeout ednsopt=timeout edns1opt=timeout do=timeout ednsflags=timeout docookie=timeout edns512tcp=refused optlist=timeout

Warning: test failures may indicate that some DNS clients cannot resolve the zone or will get a unintended answer or resolution will be slower than necessary.

Возникла задача. Есть сервер с древней версией debian 5. Нужно обновить на текущую версию. Обновился с 5 на 6. Дальше проблема.

:~# apt-get update Get:1 http://archive.debian.org squeeze Release.gpg [1655B] Ign http://archive.debian.org squeeze/main Translation-en_US Ign http://archive.debian.org squeeze/non-free Translation-en_US Ign http://archive.debian.org squeeze/contrib Translation-en_US Hit http://archive.debian.org squeeze Release Err http://archive.debian.org squeeze Release

Get:2 http://archive.debian.org squeeze Release [96.0kB] Ign http://archive.debian.org squeeze Release Ign http://archive.debian.org squeeze/main Packages/DiffIndex Ign http://archive.debian.org squeeze/non-free Packages/DiffIndex Ign http://archive.debian.org squeeze/contrib Packages/DiffIndex Hit http://archive.debian.org squeeze/main Packages Hit http://archive.debian.org squeeze/non-free Packages Hit http://archive.debian.org squeeze/contrib Packages Fetched 97.7kB in 2s (34.6kB/s) Reading package lists... Done W: GPG error: http://archive.debian.org squeeze Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1501892461 W: You may want to run apt-get update to correct these problems

:~# apt-key list | grep expired pub 1024D/F42584E6 2008-04-06 [expired: 2012-05-15] pub 2048R/6D849617 2009-01-24 [expired: 2013-01-23] pub 4096R/B98321F9 2010-08-07 [expired: 2017-08-05] :~#

apt-key adv --recv-keys --keyserver keys.gnupg.net F42584E6 Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /etc/apt/secring.gpg --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --recv-keys --keyserver keys.gnupg.net F42584E6 gpg: requesting key F42584E6 from hkp server keys.gnupg.net gpg: key F42584E6: «Lenny Stable Release Key <debian-release@lists.debian.org>» not changed gpg: Total number processed: 1 gpg: unchanged: 1

И ничего не меняется..

Если попробовать подложить тут source.list с след версией debian, обновить не получается -

apt-get update Hit http://ftp.be.debian.org wheezy Release.gpg Ign http://ftp.be.debian.org wheezy/main Translation-en_US Ign http://ftp.be.debian.org wheezy/contrib Translation-en_US Ign http://ftp.be.debian.org wheezy/non-free Translation-en_US Hit http://ftp.be.debian.org wheezy Release Ign http://ftp.be.debian.org wheezy/main Packages/DiffIndex Ign http://ftp.be.debian.org wheezy/contrib Packages/DiffIndex Ign http://ftp.be.debian.org wheezy/non-free Packages/DiffIndex Ign http://ftp.be.debian.org wheezy/main Sources/DiffIndex Ign http://ftp.be.debian.org wheezy/contrib Sources/DiffIndex Ign http://ftp.be.debian.org wheezy/non-free Sources/DiffIndex Hit http://ftp.be.debian.org wheezy/main Packages Hit http://ftp.be.debian.org wheezy/contrib Packages Hit http://ftp.be.debian.org wheezy/non-free Packages Hit http://ftp.be.debian.org wheezy/main Sources Hit http://ftp.be.debian.org wheezy/contrib Sources Hit http://ftp.be.debian.org wheezy/non-free Sources Reading package lists... Done W: There is no public key available for the following key IDs: 7638D0442B90D010 W: You may want to run apt-get update to correct these problems

apt-get install debian-archive-keyring

сначала так же обновляем ключи, apt-get update и там потом -

Fetched 21.8MB in 3min37s (100kB/s) Preconfiguring packages ... (Reading database ... 20165 files and directories currently installed.) Preparing to replace aptitude 0.4.11.11-1~lenny2 (using .../aptitude_0.6.8.2-1_i386.deb) ... Unpacking replacement aptitude ... dpkg-deb: file `/var/cache/apt/archives/aptitude_0.6.8.2-1_i386.deb' contains ununderstood data member data.tar.xz , giving up dpkg: error processing /var/cache/apt/archives/aptitude_0.6.8.2-1_i386.deb (--unpack): subprocess dpkg-deb --fsys-tarfile returned error exit status 2 Selecting previously deselected package aptitude-common. dpkg: considering deconfiguration of aptitude, which would be broken by installation of aptitude-common ... dpkg: yes, will deconfigure aptitude (broken by aptitude-common). Unpacking aptitude-common (from .../aptitude-common_0.6.8.2-1_all.deb) ... De-configuring aptitude ... dpkg-deb: file `/var/cache/apt/archives/aptitude-common_0.6.8.2-1_all.deb' contains ununderstood data member data.tar.xz , giving up dpkg: error processing /var/cache/apt/archives/aptitude-common_0.6.8.2-1_all.deb (--unpack): subprocess dpkg-deb --fsys-tarfile returned error exit status 2 Selecting previously deselected package gcc-4.7-base. Unpacking gcc-4.7-base (from .../gcc-4.7-base_4.7.2-5_i386.deb) ... Errors were encountered while processing: /var/cache/apt/archives/aptitude_0.6.8.2-1_i386.deb /var/cache/apt/archives/aptitude-common_0.6.8.2-1_all.deb E: Sub-process /usr/bin/dpkg returned an error code (1)

Ставлю на Ubuntu 16.04 (виртуалка) по разным статьям Docker. Всё ставится, позже начинается проблемы такого характера:

sudo docker pull ubuntu
Using default tag: latest
Error response from daemon: Get https://registry-1.docker.io/v2/library/ubuntu/manifests/latest: Get https://auth.docker.io/token?scope=repository%3Alibrary%2Fubuntu%3Apull&service=registry.docker.io: read tcp 

ну или даже так:

sudo docker login
[sudo] password for konstantin:
Login with your Docker ID to push and pull images from Docker Hub. If you don't have a Docker ID, head over to https://hub.docker.com to create one.
Username: postfix81
Password:
Error response from daemon: Get https://registry-1.docker.io/v2/: Get https://auth.docker.io/token?account=postfix81&client_id=docker&offline_token=true&service=registry.docker.io: read tcp 192.168.*.*:39472->34.200.28.105:443: read: connection reset by peer

руками registry-1.docker.io в hosts забивал

в конфиг файле docker'а тоже раскомментировал строчку с dns В общем ничего не помогает. Переустановка. Установка по другим статьям. Кто сталкивался?

Перемещено leave из development