Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-60515

ocp sno coredns leaking internal DNS queries to upstream

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Major Major
    • None
    • 4.18
    • Networking / DNS
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Critical
    • None
    • None
    • None
    • Rejected
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

          A SNO cluster with more than 300 pods and 3 VMs customer will have 1500 of these clusters and 3-4 central DNS servers, ocp is sending internal queries to upstream more than 50 per minute this adds up quickly and creates a flood in the system, cutomer want to get rid of these internal queries.

      a support ticket also raised
      https://access.redhat.com/support/cases/#/case/04223109
      9:14

      I believe this issue may be due to How coredns is handling the load.
       coredns config

      data:
        Corefile: |
          .:5353 {
              bufsize 1232
              errors
              log .

      {             class denial error         }

              health

      {             lameduck 20s         }

              ready
              kubernetes cluster.local in-addr.arpa ip6.arpa

      {             pods insecure             fallthrough in-addr.arpa ip6.arpa         }

              prometheus 127.0.0.1:9153
              forward . /etc/resolv.conf

      {             policy sequential         }

              cache 900

      {             denial 9984 30         }

              reload
          }
          hostname.bind:5353

      {         chaos     }

      Version-Release number of selected component (if applicable):

          ocp 4.18

      How reproducible:

          

      Steps to Reproduce:

          1.
          2.
          3.
          

      Actual results:

          

      Expected results:

          

      Additional info:

          

              nid-team-bot NID Team Bot
              rh-ee-mobthoma Mobin Thomas (Inactive)
              None
              None
              Neil Hamza Neil Hamza
              None
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: