# Nov 11, 2025

:::tip
*Resident in-response –* @[@Dmitry Nourell](mention://a9cd11bb-2946-43d2-a27d-ecfb075c19ac/user/298a2e26-87de-4753-a045-717271c8b2f5) @[Leonid Evdokimov](mention://e0bbe87d-f5f7-4691-8d62-c53d5bbcc90b/user/8416174a-5748-4824-ae3c-e96c450e607c) 

:::

## Teleport and BKSP ID were unavailable for a few hours.

### Teleport & BKSP ID Malfunction

Both services failed to perform DNS lookup during their normal operations. Error traced to Unbound service crash on OPNsense, leading to DNS resolve failure in the entire LAN segment.

### OPNsense Unbound Malfunction


:::tip
When @[Dmitry Nourell](mention://ba84ceae-6890-4bea-bf9f-b1dab8ae3852/user/298a2e26-87de-4753-a045-717271c8b2f5) opened OPNsense UI, Unbound service was stopped. Everything got back to normal after the service restart.

:::

* OOM killer killed `unbound` as it’s usually the largest process on the node: ≈260 MiB of RES due to huge DNS blocklists.
* #TIL `[zone: pf states] PF states limit reached` due to traffic to [ntppool NTP service](https://www.ntppool.org/scores/83.243.68.157).
* #TIL `syslog-ng` *sometimes* takes as much as ≈1460 MiB of RES, shrinking down to 16 MiB awhile keeping SIZE at 1917M. Other noticed SIZE/RES *__spikes__* are: 909M / 153M, 909M / 394M; 1789M / 1427M; 1917M / 1461M.

  That’s default `syslog-ng 4 (4.8.1)` from OPNsense 25.1.

  The fishy behavior is long-time-ago overflown `/var/log` and `truss` showing repeated attempts to create month-old logs like `/var/log/audit/audit_20251005.log` on Nov12.

### Action Points

:white_check_mark: OPNsense 25.1 → 25.7

:white_check_mark: `node_exporter` at `uxie.int.bksp.in`

✍️ ***__stateless__*** NAT for `0.ntp.bksp.in:123` to `timekeeper.int.bksp.in:123`: [opnsense/core#9396](https://github.com/opnsense/core/issues/9396)

✍️ статистика `pf` для `node_exporter`<https://10.0.2.1/>

✍️ `syslog-ng` QA

✍️ `/var/log/*/*_20??????.log` rotation and/or compression

---

**Documents**

- [BKSP 101](https://wiki.bksp.in/s/public/doc/bksp-101-HvrtlzB32F)
- [Проекты](https://wiki.bksp.in/s/public/doc/proekty-yjWZscgTvo)
- [Infrastructure](https://wiki.bksp.in/s/public/doc/infrastructure-VPKsJwVSVh)
- [Пространство](https://wiki.bksp.in/s/public/doc/prostranstvo-UF1eSbQDi5)
- [Equipment](https://wiki.bksp.in/s/public/doc/equipment-t5MYAVJ8l0)
- [Other](https://wiki.bksp.in/s/public/doc/other-uPW1YJQaRt)