Hey guys i have been trying technitium on my Proxmox server, and trying to optimize it for best response/performance as its running as Recursive resolver.
Based on my research it seems setting Serve Stale Max Wait Time to 0 improve cache hits by a lot, but it seems on my setup causing lots of Server Failure EDE 3, EDE 13, EDE 22.
While i didn't notice anything not actually loading, but seeing the errors keeps rising up kinda worrying.
Anything can be done about it? it seems if set the default 1800ms error counts is almost at 0 after 1 hour.
it seems clearing the cache for the bugged domins fix it for sometimes then it errors again, also flushed the whole cache yesterday which didn't fix it either.
root@prxmox:~# dig .168.1.117 lx0-eu.mykeeta.com AAAA ; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 lx0-eu.mykeeta.com AAAA ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 10627 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; EDE: 22 (No Reachable Authority): (No valid response from name servers for lx0-eu.mykeeta.com. AAAA IN at delegation mykeeta.com.) ; EDE: 13 (Cached Error): (lx0-eu.mykeeta.com. AAAA IN) ; EDE: 3 (Stale Answer): (lx0-eu.mykeeta.com AAAA IN) ;; QUESTION SECTION: ;lx0-eu.mykeeta.com. IN AAAA ;; Query time: 1 msec ;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP) ;; WHEN: Sun Sep 20 15:01:20 +04 2026 ;; MSG SIZE rcvd: 212 oot@prxmox:~# dig .168.1.117 es.du.ae AAAA ; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 es.du.ae AAAA ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4121 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; EDE: 3 (Stale Answer): (es.du.ae AAAA IN) ;; QUESTION SECTION: ;es.du.ae. IN AAAA ;; AUTHORITY SECTION: du.ae. 30 IN SOA dxbns1.duhosting.ae. admin.du.ae. 52414 21600 3600 604800 600 ;; Query time: 0 msec ;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP) ;; WHEN: Sun Sep 20 15:01:02 +04 2026 ;; MSG SIZE rcvd: 118 root@prxmox:~# dig .168.1.117 sdk.iad-01.braze.com ; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 sdk.iad-01.braze.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55533 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; EDE: 22 (No Reachable Authority): (No valid response from name servers for sdk.iad-01.braze.com. A IN at delegation braze.com.) ; EDE: 13 (Cached Error): (sdk.iad-01.braze.com. A IN) ; EDE: 3 (Stale Answer): (sdk.iad-01.braze.com A IN) ;; QUESTION SECTION: ;sdk.iad-01.braze.com. IN A ;; Query time: 0 msec ;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP) ;; WHEN: Sun Sep 20 14:53:47 +04 2026 ;; MSG SIZE rcvd: 209 root@prxmox:~# dig .168.1.117 eaassets-a.akamaihd.net ; <<>> DiG 9.20.26-1~deb13u1-Debian <<>> u/192.168.1.117 eaassets-a.akamaihd.net ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55061 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; EDE: 22 (No Reachable Authority): (No valid response from name servers for eaassets-a.akamaihd.net. A IN at delegation akamaihd.net.) ; EDE: 13 (Cached Error): (eaassets-a.akamaihd.net. A IN) ; EDE: 3 (Stale Answer): (eaassets-a.akamaihd.net A IN) ;; QUESTION SECTION: ;eaassets-a.akamaihd.net. IN A ;; Query time: 0 msec ;; SERVER: 192.168.1.117#53(192.168.1.117) (UDP) ;; WHEN: Sun Sep 20 14:53:25 +04 2026 ;; MSG SIZE rcvd: 224 { "Metadata": { "NameServer": "technitiumdns (127.0.0.1)", "Protocol": "Udp", "DatagramSize": "215 bytes", "RoundTripTime": "0.28 ms" }, "EDNS": { "UdpPayloadSize": 1232, "ExtendedRCODE": "ServerFailure", "Version": 0, "Flags": "DNSSEC_OK", "Options": [ { "Code": "EXTENDED_DNS_ERROR", "Length": "97 bytes", "Data": { "InfoCode": "NoReachableAuthority", "ExtraText": "No valid response from name servers for lx0-eu.mykeeta.com. HTTPS IN at delegation mykeeta.com." } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "30 bytes", "Data": { "InfoCode": "CachedError", "ExtraText": "lx0-eu.mykeeta.com. HTTPS IN" } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "29 bytes", "Data": { "InfoCode": "StaleAnswer", "ExtraText": "lx0-eu.mykeeta.com HTTPS IN" } } ] }, "DnsClientExtendedErrors": [ { "InfoCode": "NoReachableAuthority", "ExtraText": "technitiumdns (127.0.0.1) returned RCODE=ServerFailure for lx0-eu.mykeeta.com. HTTPS IN" } ], "Identifier": 58587, "IsResponse": true, "OPCODE": "StandardQuery", "AuthoritativeAnswer": false, "Truncation": false, "RecursionDesired": true, "RecursionAvailable": true, "Z": 0, "AuthenticData": false, "CheckingDisabled": true, "RCODE": "ServerFailure", "QDCOUNT": 1, "ANCOUNT": 0, "NSCOUNT": 0, "ARCOUNT": 1, "Question": [ { "Name": "lx0-eu.mykeeta.com", "Type": "HTTPS", "Class": "IN" } ], "Answer": [], "Authority": [], "Additional": [ { "Name": "", "Type": "OPT", "Class": "1232", "TTL": "32768 (9h6m8s)", "RDLENGTH": "168 bytes", "RDATA": { "Options": [ { "Code": "EXTENDED_DNS_ERROR", "Length": "97 bytes", "Data": { "InfoCode": "NoReachableAuthority", "ExtraText": "No valid response from name servers for lx0-eu.mykeeta.com. HTTPS IN at delegation mykeeta.com." } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "30 bytes", "Data": { "InfoCode": "CachedError", "ExtraText": "lx0-eu.mykeeta.com. HTTPS IN" } }, { "Code": "EXTENDED_DNS_ERROR", "Length": "29 bytes", "Data": { "InfoCode": "StaleAnswer", "ExtraText": "lx0-eu.mykeeta.com HTTPS IN" } } ] }, "DnssecStatus": "Indeterminate" } ] } Source: r/technitium · by /u/yahyoh