[Dnsmasq-discuss] how to force dnsmasq to stop ignoring nameserver it thinks is on a local interface

Jonathan Knoll jonathan.knoll at oracle.com
Sat Jan 25 13:04:19 GMT 2020


I run dnsmasq in a kubernetes pod with some forwarding rules that include some kubernetes service IPs (172.31.*).  In a recent kubernetes update, it seems that kubernetes configures all of those service addresses as IPVS interfaces in the pod, and I believe dnsmasq is not ignoring those forwarding rules because it believes they are all local interfaces.  Is there a way to force dnsmasq to use the nameservers?

my config:

  dnsmasqconf: |

    # dnsmasq.conf file from ConfigMap

    no-resolv

    no-hosts

    server=/in-addr.arpa/169.254.169.254

    server=/ip6.arpa/169.254.169.254

    server=/k8s.internal/172.31.53.53

    server=/internal.domain/127.0.0.1#10053

    server=/other.domain/172.31.217.188

    # Upstream based on environment (OpenStack or BMC)

    # Must be provided via environment variable

    server=169.254.169.254

    user=root

    conf-dir=/etc/dnsmasq.d

 

logs from dnsmasq show it is ignoring the 172.* addresses:  dnsmasq - INFO 1 140344933922560 1000 - - dnsmasq[14]: ignoring nameserver 172.31.217.188 - local interface

 

After looking in the pod, I noticed those addresses actually show up in 'ip addr' output:

 

[oracle at ost-ugbu-dataraker-node21x4 app]$ ip addr | grep 172.31.217.188

    inet 172.31.217.188/32 brd 172.31.217.188 scope global kube-ipvs0

 

My assumption is that this is why dnsmasq thinks the interface is local and is ignoring it.  I notice that the internal.domain forwarded to 127.0.0.1 on port 10053 is not ignored, is it because it's a non-standard port?  Or can I force this if I just specify #53?

 

Thanks,
Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20200125/064bcaa6/attachment.html>


More information about the Dnsmasq-discuss mailing list