[Dnsmasq-discuss] dnsmasq in docker container, why and what

[Geert Stappers]

On Sun, Aug 25, 2024 at 03:09:06PM +0300, Danil Smirnov wrote:
> Hi Dominik,

Hello Danil,
(dnsmasq mailinglist in Cc: and Reply-To:_

 
> On Sun, Aug 25, 2024 at 2:51 PM Dominik Derigs wrote:
> 
> > Many possibilities and the more we know, the better. I really doubt there
> > is anything systematic concerning dnsmasq in docker but rather something
> > related to the particular container or the particular configuration.
> >
> 
> My bad - I didn't mention, that the container worked just fine for months
> until we completed the migration and put it under full load.
> 
> So this freezing issue happens only under significant load (so perhaps it's
> some race condition), e.g. this is our stats for 4 hours:
> 
> dnsmasq: time 1724557801
> dnsmasq: cache size 150, 0/711 cache insertions re-used unexpired cache entries.
> dnsmasq: queries forwarded 4744, queries answered locally 3823

Those amounts in four hours means on average an interval of more as two
seconds. A half request per second is not what I would call "full load".

> dnsmasq: queries for authoritative zones 0
> dnsmasq: DNSSEC per-query subqueries HWM 0
> dnsmasq: DNSSEC per-query crypto work HWM 0
> dnsmasq: DNSSEC per-RRSet signature fails HWM 0
> dnsmasq: pool memory in use 672, max 1248, allocated 2400
> dnsmasq: child processes for TCP requests: in use 0, highest since last SIGUSR1 0, max allowed 20.
> dnsmasq: server X.X.X.X#53: queries sent 4160, retried 3, failed 0, nxdomain replies 196, avg. latency 2ms
> dnsmasq: server X.X.X.X#53: queries sent 2412, retried 2, failed 0, nxdomain replies 72, avg. latency 4ms
> 

I suggest to follow up this message with a why and what on having dnsmasq
in docker.  That is to create more common interrest on this mailinglist
for the combo you want to use. Otherwise the status quo will be "Not
my problem, I don't use dnsmasq in docker" or "Not my problem, I have
a working dnsmasq in docker".

Please do that for dnsmasq community and for a future version of
you in your current situation which has to start an email thread
with "There is some evidence on the Internet that dnsmasq doesn't play
well with docker".


Groeten
Geert Stappers
-- 
Silence is hard to parse