[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAGpKtJ7YRMvxZ-9Nd+OEga7i4b=p1FTtaKvr8eiuWnmEBU0WyQ@mail.gmail.com>
Date: Thu, 28 Sep 2017 15:45:28 +0530
From: Srinivasa Raghavan <raghav135@...il.com>
To: musl@...ts.openwall.com
Subject: DNS resolution happenning only after timeout
Hi,
When using "Alpine" docker image which uses musl-libc, we are facing delay
when we do operations like below in our production environment,
1. ping <name>
2. nslookup <name>
3. traceroute <name>
4. http request from node.js
There is a 5 second delay in name resolution, and then the above command
returns the response. The same problem does not occur in "debian" docker
image (which uses GNU libc).
In our case, there is a combination of SERVFAIL, "canonical name" along
with "Non authoritative answer".
Some learnings after doing some trial and error:
1. If I install "bind-tools" package in alpine, the "nslookup" happens
without delay.
2. If I set "options timout:1" in /etc/resolv.conf , then the name is
resolved after 1 second (instead of 5 seconds).
3. Whatever I change in /etc/resolv.conf (Like setting "domain", "search"),
there was no benefit.
4. output of "host"/"nslookup" command shows "SERVFAIL"
5. The problem does not occur if run from the host machine (Not from alpine
container).
6. The problem does not occur if run from another container which uses Gnu
libc, like "Debian" image.
Sample command outputs attached for reference.
Request you to kindly help in debugging / resolution of this.
Kind Regards,
R. Srinivasa Raghavan.
Content of type "text/html" skipped
Download attachment "dns.rtf" of type "application/rtf" (3864 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
