[getdns-users] Stubby constantly has to be restarted to work in Manjaro

[Advrk Aplmrkt]

OK. I've tried this for a while and here's what I found.

I commented out the dnssec line in stubby.yml and restarted stubby via
systemctl. After that stubby worked reliably for several hours of
general Internet use like web browsing.

Next, I put the dnssec line *back* into stubby.yml and restarted
stubby again. This time, even though stubby didn't fail every few
minutes, the lookups are unreliable (some times I have to reload a
site two or even three times before the lookup worked) and performance
is bad (lookups take much longer than without dnssec). Even then, I
still have to restart stubby every once in a while (maybe a few times
per hour) for it to work.

Finally, I removed the dnssec line again from stubby.yml, and stubby
is suddenly much more reliable and performant again.

Is this information helpful for diagnosing the problem? How can we
solve this problem? Thanks!!

On 20/06/2018, Willem Toorop <willem at nlnetlabs.nl> wrote:
> Op 20-06-18 om 16:43 schreef Advrk Aplmrkt:
>> I see. I originally installed stubby from the Manjaro Linux Community
>> repository, so it's a prebuilt binary. Should I uninstall that first,
>> then follow your instructions to build from source? (sorry I'm kind of
>> new to this so some hand holding needed...)
>
> No problem! I have to think about how to continue...
>
> In the mean time, could you try to comment out the dnssec_return_status
> option in your stubby.yml file, to see if the issue is indeed DNSSEC
> validation related?
>
> Did you enable that option yourself btw?
> Or was that the Manjaro default?
>
> -- Willem
> _______________________________________________
> Users mailing list
> Users at getdnsapi.net
> https://getdnsapi.net/mailman/listinfo/users
>