[Dnsmasq-discuss] NXDOMAIN on exisiting A record
pemensik at redhat.com
Wed Jul 10 10:31:54 BST 2019
I would try removing all-servers and clear-on-reload statements away. I
would use just one server for testing, retesting all of them for the
same behaviour. When you do not know which server is used, it is hard to
I think dots in server=/.X/ are not necessary and maybe even misleading.
Try it without them, just server=/X/ip
I think one second timeout is too short. Just use only localhost in
/etc/resolv.conf and debug what happens with dnsmasq. Record what
queries are sent to dnsmasq and what dnsmasq forwards to configured servers.
Note I discovered already requests without recursion desired bit set are
forwarded always, do not serve any local records. But that should not be
the issue. Try dig +rec and dig +norec to rule it out.
On 7/7/19 10:28 PM, Alex Litvak wrote:
> (luck of sleep, fixing some mistakes in text)
> Hello everyone,
> I run consul services on my network where services are registered with
> <xyz>.service.consul when they start. All containers and bare metal
> hosts are running dnsmasq 2.80.
> I noticed that if I restart one of the containers, one of the hosts
> continue failing to resolve the service name. I assume that dnsmasq is
> a culprit because:
> 1. I can resolve service xyz.service.consul against standard dns servers
> with dig.
> 2. Dnsmasq listening on 127.0.0.1 is the first line in the resolve.conf
> and when I run tcpdump against port 53 on interface lo I see it returns
> NXDOMAIN on each A record query for service in question.
> 3. If I restart dnsmasq everything is back to normal again. Even more
> weird, if I send SIGHUP to dnsmasq, which only causes a reread of
> /etc/hosts file, everything is back to normal as far as service
> resolution goes.
> I have this problem only happening on some hosts without the pattern I
> can recognize. For example I have two nodes with the same config, os,
> kernel version, dnsmasq version, etc ... and one of them has the problem
> 100% after service xyz.service.consul restart and the other is not.
> Where do I start troubleshooting? Any ideas are welcome.
> Here is a standard dnsmasq confugration.
> # If you don't want dnsmasq to read /etc/hosts, uncomment the
> # following line.
> # or if you want it to read another file, as well as /etc/hosts, use
> # this.
> # Set the cachesize here.
> # If you want to disable negative caching, uncomment this.
> # For debugging purposes, log each DNS query as it passes through
> # dnsmasq.
> Resolver config
> search ''
> options timeout:1 attempts:1
> nameserver 127.0.0.1
> nameserver 10.0.48.11
> nameserver 10.0.48.12
> nameserver 10.0.21.63
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
Red Hat, http://www.redhat.com/
email: pemensik at redhat.com PGP: 65C6C973
More information about the Dnsmasq-discuss