[Bug 270912] dns/unbound issues with ASLR

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 18 Apr 2023 13:33:03 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270912

            Bug ID: 270912
           Summary: dns/unbound issues with ASLR
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: wout@canodus.be
                CC: jaap@NLnetLabs.nl
             Flags: maintainer-feedback?(jaap@NLnetLabs.nl)
                CC: jaap@NLnetLabs.nl

After upgrading to FreeBSD 13.2, I notice issues with the Unbound DNS resolver.
There seem to be a lot of timeouts to the forward servers:

Apr 18 14:32:59 canobox0 unbound[98053]: [98053:0] error: SERVFAIL
<www.google.com. AAAA IN>: all the configured stub or forward servers failed,
at zone . from 9.9.9.9 upstream server timeout

Disabling ASLR seems to resolve the issue.

The Unbound server is using DNS over TLS with the following configuration:

forward-zone:
        name: .
        forward-tls-upstream: yes
        forward-addr: 9.9.9.9@853               # Quad9
        forward-addr: 149.112.112.112@853       # Quad9
        forward-addr: 2620:fe::fe@853           # Quad9
        forward-addr: 2620:fe::9@853            # Quad9

-- 
You are receiving this mail because:
You are the assignee for the bug.