Re: DNS woes

I wonder if your DNS server rejects queries like the one we use for DNS check...


A packet trace can verify that.

________________________________
From: Scott Classen <[email protected]>
Sent: Thursday, April 25, 2019 3:48:29 PM
To: Parisi, Justin
Cc: [email protected]
Subject: Re: DNS woes

NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the sender and know the content is safe.




sibyls2::*> dns modify -vserver als-enable-ds1 -domains als.lbl.gov,lbl.gov -name-servers 131.243.5.2 -timeout 10

Error: "10" is an invalid value for field "-timeout <1..5>"

sibyls2::*> dns modify -vserver als-enable-ds1 -domains bl1231.als.lbl.gov,als.lbl.gov,lbl.gov -name-servers 131.243.5.2 -timeout 5

Error: Failed to verify the specified DNS configuration.
       131.243.5.2: Operation timed out.
       command failed: Verify that the network configuration is correct and that DNS servers are available. Specify "-skip-config-validation" to skip the configuration validation.


sibyls2::*> dns modify -vserver als-enable-ds1 -domains bl1231.als.lbl.gov,als.lbl.gov,lbl.gov -name-servers 131.243.5.2 -timeout 5 -skip-config-validation

sibyls2::*> dns check -vserver als-enable-ds1
                              Name Server
Vserver       Name Server     Status       Status Details
------------- --------------- ------------ --------------------------
als-enable-ds1                down         Operation timed out.
              131.243.5.2

sibyls2::*> vserver services name-service getxxbyyy gethostbyname -node sibyls2-03 -vserver als-enable-ds1 -hostname nsals.lbl.gov
Host name: nsals.lbl.gov
Canonical name: nsals.lbl.gov
IPv4: 131.243.5.2


Seems odd that a gethostbyname of the name server (nsals.lbl.gov) works but dns check doesn’t

S



> On Apr 25, 2019, at 12:39 PM, Parisi, Justin <[email protected]> wrote:
>
> So, ping and traceroute won't really check what you need to check for DNS connectivity; that's access to the IP over port 53.
>
> DNS check will test round trip time to the DNS server by doing a simple DNS lookup of example.domain.com and reports the time it took for that request.
>
> "Operation timed out" means either that the DNS query couldn't be made or it took longer than the DNS timeout you have set. Try increasing the timeout from 2 seconds to 10 seconds and retry the check. A packet trace will also be useful to see why/how the requests are failing.
>
> -----Original Message-----
> From: [email protected] <[email protected]> On Behalf Of Scott Classen
> Sent: Thursday, April 25, 2019 2:48 PM
> To: [email protected]
> Subject: DNS woes
>
> NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the sender and know the content is safe.
>
>
>
>
> Hello,
>
> Can anyone help me with this before I open a case with NetApp?
>
> dns check on one of my sververs fails (see below where I get an “Operation timed out” error), but I can ping and traceroute from the vserver to the gateway and the DNS servers.
>
>
>
> sibyls2::*> dns show -vserver als-enable-ds1
>
>                              Vserver: als-enable-ds1
>                              Domains: als.lbl.gov, lbl.gov
>                         Name Servers: 131.243.5.1, 131.243.5.2
>                       Timeout (secs): 2
>                     Maximum Attempts: 1
>                Is TLD Query Enabled?: true Require Source and Reply IPs to Match: true
>      Require Packet Queries to Match: true
>
>
> sibyls2::*> dns check -vserver als-enable-ds1
>                              Name Server
> Vserver       Name Server     Status       Status Details
> ------------- --------------- ------------ --------------------------
> als-enable-ds1                down         Operation timed out.
>              131.243.5.1
> als-enable-ds1                down         Operation timed out.
>              131.243.5.2
> 2 entries were displayed.
>
>
> sibyls2::*> ping -node sibyls2-03 -destination 131.243.78.1 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.78.1 is alive
>
> sibyls2::*> ping -node sibyls2-03 -destination 131.243.5.1 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.5.1 is alive
>
> sibyls2::*> ping -node sibyls2-03 -destination 131.243.5.2 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.5.2 is alive
>
> sibyls2::*> ping -node sibyls2-04 -destination 131.243.78.1 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.78.1 is alive
>
> sibyls2::*> ping -node sibyls2-04 -destination 131.243.5.1 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.5.1 is alive
>
> sibyls2::*> ping -node sibyls2-04 -destination 131.243.5.2 -vserver als-enable-ds1 -wait-response 2000 -count 3
> 131.243.5.2 is alive
>
> sibyls2::*> traceroute -node sibyls2-03 -vserver als-enable-ds1 -destination 131.243.78.1 traceroute to 131.243.78.1 (131.243.78.1), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  0.521 ms *  0.484 ms
>
>
> sibyls2::*> traceroute -node sibyls2-03 -vserver als-enable-ds1 -destination 131.243.5.1 traceroute to 131.243.5.1 (131.243.5.1), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  0.478 ms  0.369 ms  0.376 ms
> 2  xe-2-2-1.er1-n1.lbl.gov (131.243.244.140)  0.411 ms  0.391 ms  0.330 ms
> 3  t5-4.ir1-n1.lbl.gov (131.243.244.131)  0.796 ms  1.365 ms  0.524 ms
> 4  ns.lbl.gov (131.243.5.1)  0.402 ms  0.765 ms  0.936 ms
>
>
> sibyls2::*> traceroute -node sibyls2-03 -vserver als-enable-ds1 -destination 131.243.5.2 traceroute to 131.243.5.2 (131.243.5.2), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  0.446 ms  0.409 ms  0.375 ms
> 2  nsals.lbl.gov (131.243.5.2)  0.649 ms  1.047 ms  1.080 ms
>
> sibyls2::*> traceroute -node sibyls2-04 -vserver als-enable-ds1 -destination 131.243.78.1 traceroute to 131.243.78.1 (131.243.78.1), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  0.443 ms *  0.502 ms
>
> sibyls2::*> traceroute -node sibyls2-04 -vserver als-enable-ds1 -destination 131.243.5.1 traceroute to 131.243.5.1 (131.243.5.1), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  0.515 ms  0.402 ms  0.388 ms
> 2  xe-2-2-1.er1-n1.lbl.gov (131.243.244.140)  0.513 ms  0.344 ms  0.326 ms
> 3  t5-4.ir3-n2.lbl.gov (131.243.244.129)  1.737 ms  1.618 ms
>    t5-4.ir4-n3.lbl.gov (131.243.244.133)  0.582 ms
> 4  ns.lbl.gov (131.243.5.1)  0.898 ms  1.213 ms  0.517 ms
>
> sibyls2::*> traceroute -node sibyls2-04 -vserver als-enable-ds1 -destination 131.243.5.2 traceroute to 131.243.5.2 (131.243.5.2), 64 hops max, 40 byte packets
> 1  vlan3078.irals.lbl.gov (131.243.78.1)  2.075 ms  1.451 ms  0.403 ms
> 2  nsals.lbl.gov (131.243.5.2)  1.198 ms  0.410 ms  0.911 ms _______________________________________________
> Toasters mailing list
> [email protected]
> http://www.teaparty.net/mailman/listinfo/toasters

_______________________________________________
Toasters mailing list
[email protected]
http://www.teaparty.net/mailman/listinfo/toasters