[unbound] Disable IPv6 per default, as it causes strong ipv4 degradation on machines with no or bad IPv6. Adde
Paul Wouters
pwouters at fedoraproject.org
Tue Oct 26 14:33:49 UTC 2010
commit ba73b71d5178004f765561ab5a7665cc0df2c003
Author: Paul Wouters <paul at xelerance.com>
Date: Tue Oct 26 10:32:35 2010 -0400
Disable IPv6 per default, as it causes strong ipv4 degradation on machines
with no or bad IPv6. Added comments in unbound.conf pointing to discussion
and test sites.
unbound.conf | 7 ++++++-
unbound.spec | 6 +++++-
2 files changed, 11 insertions(+), 2 deletions(-)
---
diff --git a/unbound.conf b/unbound.conf
index 2f32c73..a969c38 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -145,7 +145,12 @@ server:
# do-ip4: yes
# Enable IPv6, "yes" or "no".
- # do-ip6: yes
+ # If you need ipv6, check MTU and you might have to disable ip6tables
+ # see https://dnssec.surfnet.nl/?p=464
+ # Test using https://www.dns-oarc.net/oarc/services/replysizetest
+ # Setting this to yes on non-ipv6 enabled machine can cause the
+ # ipv4 query rate to drop from 40k qps to 1k qps
+ do-ip6: no
# Enable UDP, "yes" or "no".
# do-udp: yes
diff --git a/unbound.spec b/unbound.spec
index 1cae4ec..f2f3480 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -9,7 +9,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound
Version: 1.4.5
-Release: 2%{?dist}
+Release: 3%{?dist}
License: BSD
Url: http://www.nlnetlabs.nl/unbound/
Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
@@ -195,6 +195,10 @@ fi
%postun libs -p /sbin/ldconfig
%changelog
+* Tue Oct 26 2010 Paul Wouters <paul at xelerance.com> - 1.4.5-3
+- Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
+ (see comments in inbound.conf)
+
* Tue Jun 15 2010 Paul Wouters <paul at xelerance.com> - 1.4.5-2
- Bump release - forgot to upload the new tar ball.
More information about the scm-commits
mailing list