Increase TAT query interval
Currently, ns3 in the "mirror" system test sends trust anchor telemetry queries every second as it is started with "-T tat=1". Given the number of trust anchors configured on ns3 (9), TAT-related traffic clutters up log files, hindering troubleshooting efforts. Increase TAT query interval to 3 seconds in order to alleviate the issue. Note that the interval chosen cannot be much higher if intermittent test failures are to be avoided: TAT queries are only sent after the configured number of seconds passes since resolver startup. Quick experiments show that even on contemporary hardware, ns3 should be running for at least 5 seconds before it is first shut down, so a 3-second TAT query interval seems to be a reasonable, future-proof compromise. Ensure the relevant check is performed before ns3 is first shut down to emphasize this trade-off and make it more clear by what time TAT queries are expected to be sent.
This commit is contained in:
@@ -213,6 +213,14 @@ nextpartpeek ns3/named.run | grep "verify-load.*mirror zone is now in use" > /de
|
||||
if [ $ret != 0 ]; then echo_i "failed"; fi
|
||||
status=`expr $status + $ret`
|
||||
|
||||
n=`expr $n + 1`
|
||||
echo_i "ensuring trust anchor telemetry queries are sent upstream for a mirror zone ($n)"
|
||||
ret=0
|
||||
# ns3 is started with "-T tat=3", so TAT queries should have already been sent.
|
||||
grep "_ta-[-0-9a-f]*/NULL" ns1/named.run > /dev/null || ret=1
|
||||
if [ $ret != 0 ]; then echo_i "failed"; fi
|
||||
status=`expr $status + $ret`
|
||||
|
||||
n=`expr $n + 1`
|
||||
echo_i "checking that loading a correctly signed mirror zone from disk succeeds ($n)"
|
||||
ret=0
|
||||
@@ -541,13 +549,5 @@ grep "flags:.* ad" dig.out.ns3.test$n > /dev/null || ret=1
|
||||
if [ $ret != 0 ]; then echo_i "failed"; fi
|
||||
status=`expr $status + $ret`
|
||||
|
||||
n=`expr $n + 1`
|
||||
echo_i "ensuring trust anchor telemetry queries are sent upstream for a mirror zone ($n)"
|
||||
ret=0
|
||||
# ns3 is started with "-T tat=1", so TAT queries should have already been sent.
|
||||
grep "_ta-[-0-9a-f]*/NULL" ns1/named.run > /dev/null || ret=1
|
||||
if [ $ret != 0 ]; then echo_i "failed"; fi
|
||||
status=`expr $status + $ret`
|
||||
|
||||
echo_i "exit status: $status"
|
||||
[ $status -eq 0 ] || exit 1
|
||||
|
||||
Reference in New Issue
Block a user