If all containers forwarding to nodes for name resolution and nodes forwarding to master for DNS resolution, what master does for external queries for which master is not authorities? Am wonder how curl and ping is working from containers for dig/lookup not working unless we mention @name server in the query.
Can someone explain how name resolution works in below scenarios - POD to corporate resources - POD to external resources What master nameserver does ( dnsmasq) in above occasions? -- Srinivas Kotaru From: "[email protected]" <[email protected]> Date: Tuesday, January 31, 2017 at 1:24 PM To: Srinivas Naga Kotaru <[email protected]> Cc: dev <[email protected]> Subject: [SUSPICIOUS] Re: service discover - always confuse Including the list correctly. On Tue, Jan 31, 2017 at 4:06 PM, Clayton Coleman <[email protected]<mailto:[email protected]>> wrote: On Jan 30, 2017, at 1:51 AM, Srinivas Naga Kotaru (skotaru) <[email protected]<mailto:[email protected]>> wrote: Hi Observed 2 different behaviors in my platform. not sure this is expected behavior or not. Can you clarify for below behaviors? 1. Name resolution not working for external domains although ping and curl commands working as expected Examples: # oc rsh kong-app3-792309857-1i4xk # ping -c1 google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> PING google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> (216.58.204.110) 56(84) bytes of data. 64 bytes from par10s28-in-f14.1e100.net<http://secure-web.cisco.com/1CFI4O1dpduXxSBAvCZF5OaKY1YkUPCVRmxKXA0ssOpNS7NKzcBuyebhEP4yzszEo3W4WvK7Zn_0J4IU7SOVDWYUP0C-LXnFdy2Z9dMsEZZr2CGbMH8bIpQcAX6qshoTW99z5uB7SUMfLXIS8Isg7-8ys3x_8nmKB3KtM91mOAh--k8jcCteJ74Z52-xx_GBqF68MfseCsJAv-FXUxOenNhNpfz7O46XVkdrGAEVpQMltWAfWT-oIStz6Q-xbbmo3TRqAeM5b6GGI0YpA8E3O_1-lHmh9pSXQlH9ZqMNLnJBuCGwOgModIaHgL_Fci6kuaUT1hFucVPP1SCKWl7cdKA/http%3A%2F%2Fpar10s28-in-f14.1e100.net> (216.58.204.110): icmp_seq=1 ttl=47 time=85.7 ms #$ curl -IL google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> HTTP/1.1 302 Found Cache-Control: private Location: http://secure-web.cisco.com/161IUJ29rLtqDu4qCdZKtaRCUMt8xdybiQ5Y6_yw383Yl_tbsNfQlk0Vh6yvGPFyTquM8wx4hmm0H5gcrzQu0YnLl2iMjdjWo9DyQDq6KFY8-7PF6P3I2Fft9aw3SK32g4c7vK0h9EAapyOyYLY1oy99qUWkhaUcsU4m-KACvLiuGZkObHP_v20FGn114xPVUn4Yk9hQeAikGfkp_7d00ZCdrpqIEmghKo1B-Lbby2ZStgpIH6uVuuZ5WWUMPi2fteWHl40sauFqvLCfYesgsrLpEuYCfo7ABVo9MJhM-UiC13clZD_EEU9aNwAzOEOA0RMwYyBE7O8-r_QiSuXbiVQ/http%3A%2F%2Fwww.google.com.co%2F%3Fgfe_rd=cr&ei=6d6OWOCgJPLU8ge42JWoCA<http://secure-web.cisco.com/1F4ob_uMFD6hdjdNFXM9Ko2rCShVKCTtPr7aeJ2BFXt-d8jr5AVGFPWr5UQq-Tutfbas672ro73plh2hN7xd9Lcu5wFv4wLcj2GSyhEzByWcqxG-SXI4_75Hb_dMsBmnbwlKIMoyNhSPtalsTv5IjmOnGfMEMb4uE9k-lcwA_QBf4JM5klw3ziDn1raG82tcfxhl-S3jUFx3i4gp2OoWYCRNAG5dMHrWvYYedY4tXcH73CLczl-ko_J7PAmi7IoY1Bfjh8QiyJxJZDLMZuz4FmOAcSBaYBjNVsBhwi3OgbY9QBxItX_0QFVfDom3OAh_d/http%3A%2F%2Fwww.google.com.co%2F%3Fgfe_rd%3Dcr%26ei%3D6d6OWOCgJPLU8ge42JWoCA> Date: Mon, 30 Jan 2017 06:36:25 GMT Content-Length: 262 Content-Type: text/html; charset=UTF-8 Via: 1.1 rtp5-dmz-wsa-1-mgmt.cisco.com:80<http://secure-web.cisco.com/1j1jeBO-osvVCpC1b2j9uZRgi3qaMTRjyDg7rcBGnSUEH5jx0N_Jryn7uZSL38q2Ad5wTuPDSxRLJXCg8knX4f3pGvwHyeaQqwYABjRU861sM32w3MClkcTW6CIdl7i-NKSHBnEglAwmT_BnGD2vdxuzvmby6HEXind9ZUtF0VXeoFi7JGoc7APslIh1eM3jN7WUGTO-NPgIMnf3_vSb_CE1Y0V-2hJSCW2WcA1xCN7gvPtWYoxPIjcweJIB9nmGcSAcBJxJHcEeWjGFT9iCuMRRTobw8-pWYH2cPZLzfp3ZrODpj1Ggo5zMUXrO5n4vFPvFrmuUSTibrJsz-BxY0Eg/http%3A%2F%2Frtp5-dmz-wsa-1-mgmt.cisco.com%3A80> (Cisco-WSA/8.8.0-085) Connection: keep-alive HTTP/1.1 200 OK Date: Mon, 30 Jan 2017 06:36:26 GMT Expires: -1 Cache-Control: private, max-age=0 P3P: CP="This is not a P3P policy! See https://secure-web.cisco.com/1nNNAY8NaXQ_HY9Ceu5NUguXCfoaeRiJOY2NCTkjkJvw3H2QaM9aRsOl98qCTJJFFCrjkiJIpJGADvMjlmo4-pxaYivTai36ss3x4j4oplbinne9nKbvwTjAnfvmHNG_W9PjJS6qNEg1XxoMm5Ok7bpR41TTR58E0aRn01o5Jnpn9hbsUMMCNLCXv81cckxF_MQ7vDmXLGs6wi42QJhjA4-34KWUoYskIiKq2EEVYY-8yFeT4tGs9Jy6a6VpQzWBpii4X5nu-TCizsXtt6WDz_ki1tHEUA4qxoNIbcIhIu9KRbGUI41_6oVBG8aFGgL7lcIuIxOur20iKnA8XBencfw/https%3A%2F%2Fwww.google.com%2Fsupport/accounts/answer/151657?hl=en<https://secure-web.cisco.com/1mjmCQ3nZsmm7FP0MnGkwsycte10gCVyd-gSRzgvp2Lo9ePKDKNIJC_d2yX-hkVJ8YZLtrZFav-kIpiD3YN-E_jI1-vff-WkgCBmv49mWhR_al4IriNnfzqY4ldxqi9hyC7yYsaeoaKKN9oEacmhvmIcjdjivNUmg_vejHfDeKXjvFiQoshErJOiMh2DEc6qf9elVeFQmeeAwskvt1nj-JubLVDdMyk1SAns8Ul11HuFJdeZZLclersJpShrDzPXvI0KppkUvQm9KjbNI8uKxY_zRx3GttEXDd1XyOn1rQiuuw9cKOWB69L7dkBxQLxsAL8sqNihdG2GbYcaWpldpfw/https%3A%2F%2Fwww.google.com%2Fsupport%2Faccounts%2Fanswer%2F151657%3Fhl%3Den> for more info." Server: gws X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Set-Cookie: NID=95=pwFoBQb-ktya5LeVlXGLKPJX2N-fLE_oIw37Wq2F7FFOeuJp0rObVHRJw7jRg9luz3Jq4f3CQadMWr6RonTJot0oxSEcx-NGKS8cDaksuT5t3mqTtPZaKb20HRjn9ffF; expires=Tue, 01-Aug-2017 06:36:26 GMT; path=/; domain=.google.com.co<http://secure-web.cisco.com/1bmgC32MvYdwiPxBxWjj6WmbVc2uwOhYlNggw7boMUdWw2ECJFAzDF5qwUZqv-QcsvMHkrbaNPfsBeIZRSYryBETVWwI-U2WQr39rzWCEaazwrdMLQ6CHY8fyMIPAXUcDOT2_22NQ646cAr7X1P9Tw2AfNySSRG27UPA3lG2HgPJJacC41xaL2Bpc-fh2mKWTPXQwzFcNId6UVpaksSWjlHJ8dR_Q_ZrFY3h3yVsetuWKvOTZb8GLB7L_yHuQ6tymytYURIOuvWvhRL2v6N58uktdWqVjtHqHizsSGBGLuyzpFZ-b9NEFZuv1hoQvPzJ4zLbSsehe-SQ3avChyy5HBQ/http%3A%2F%2Fgoogle.com.co>; HttpOnly Accept-Ranges: none Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=ISO-8859-1 Via: 1.1 rtp5-dmz-wsa-1-mgmt.cisco.com:80<http://secure-web.cisco.com/1j1jeBO-osvVCpC1b2j9uZRgi3qaMTRjyDg7rcBGnSUEH5jx0N_Jryn7uZSL38q2Ad5wTuPDSxRLJXCg8knX4f3pGvwHyeaQqwYABjRU861sM32w3MClkcTW6CIdl7i-NKSHBnEglAwmT_BnGD2vdxuzvmby6HEXind9ZUtF0VXeoFi7JGoc7APslIh1eM3jN7WUGTO-NPgIMnf3_vSb_CE1Y0V-2hJSCW2WcA1xCN7gvPtWYoxPIjcweJIB9nmGcSAcBJxJHcEeWjGFT9iCuMRRTobw8-pWYH2cPZLzfp3ZrODpj1Ggo5zMUXrO5n4vFPvFrmuUSTibrJsz-BxY0Eg/http%3A%2F%2Frtp5-dmz-wsa-1-mgmt.cisco.com%3A80> (Cisco-WSA/8.8.0-085) Connection: keep-alive # cat /etc/resolv.conf search oneid-rtp.svc.cluster.local svc.cluster.local cluster.local cisco.com<http://secure-web.cisco.com/1z18rp_v6osqHiyLp6ljULckcPs3WCf8WlUP8oySxRpZyOaNhx6Zaqe5v-qMVt9mtoV_ZeiTWfPrmuzPIjbGmMlQxYHn87-fdDQzxL5Xp99YVoDDGbcxDOE3UvosQQXgmy3tPldVEegS0CCZKg7feWwCniuwHru-e5Q7I4Ai8HjYmZX4MZd9w6UMEBL_D9nnX3R5RTP8W7t8Mg2F5snARVXK_XPSvcEDUVtTL94vSoiNcKy9Enm_33hEjIRwopF9ogayOyS6of27quKU6ak-dYOnu4UtwuWam8vDxwBHqfLiXwF4acnjcYzPr7hE0lt1OlN1glqT0loXQsIs6XQcd8g/http%3A%2F%2Fcisco.com> nameserver 64.101.6.21 nameserver 144.254.71.184 nameserver 173.38.200.100 nameserver 173.38.165.13 options timeout:1 attempts:1 options ndots:5 # dig google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> ; <<>> DiG 9.9.4-RedHat-9.9.4-38.el7_3.1 <<>> google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 21380 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 Refused is not normal - does your node have dnsmasq and if so, are there any config changes there? We are moving more to having all pods only speak to the node via dnsmasq ;; QUESTION SECTION: ;google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com>. IN A ;; Query time: 1 msec ;; SERVER: 64.101.6.21#53(64.101.6.21) ;; WHEN: Mon Jan 30 06:38:07 UTC 2017 ;; MSG SIZE rcvd: 28 # nslookup google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> Server: 64.101.6.21 Address: 64.101.6.21#53 ** server can't find google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com>: REFUSED #host gogole.com<http://secure-web.cisco.com/1cXnUBgGjAnhrHsyBjUmKV-vCfJyV8M0rdVM0kpf8-BR-y4xxPhHR7ad3cJkdaA1oYfIe8RgELRjRFNou7AxydyXuf3sfpv35Jh8f2WT85bJ-Hz0rMq0Aw6XKiaiagW5bMjGcfq4RNM8nUsweh2l3z2_Fs9hKvsOD2cgeCBgSptMfvJS90L2B13489dZ33eHU2MFx_nxZ6aBlLK5sCR_ZD2PBkoM7aPbOLucqXeX1uVd4FrTTTlEBvkas1OzzggeaOrDZ7AyaPZhPt6C6KhJMAa9bO8FePzuaUYo4EQh1MxQAPMDFppRbQMNJ5SJoVD_ysdMoOdPrp2jseusRBXbZGA/http%3A%2F%2Fgogole.com> Host gogole.com<http://secure-web.cisco.com/1cXnUBgGjAnhrHsyBjUmKV-vCfJyV8M0rdVM0kpf8-BR-y4xxPhHR7ad3cJkdaA1oYfIe8RgELRjRFNou7AxydyXuf3sfpv35Jh8f2WT85bJ-Hz0rMq0Aw6XKiaiagW5bMjGcfq4RNM8nUsweh2l3z2_Fs9hKvsOD2cgeCBgSptMfvJS90L2B13489dZ33eHU2MFx_nxZ6aBlLK5sCR_ZD2PBkoM7aPbOLucqXeX1uVd4FrTTTlEBvkas1OzzggeaOrDZ7AyaPZhPt6C6KhJMAa9bO8FePzuaUYo4EQh1MxQAPMDFppRbQMNJ5SJoVD_ysdMoOdPrp2jseusRBXbZGA/http%3A%2F%2Fgogole.com> not found: 5(REFUSED) Queries against 1st server from POD /etc/resolve.conf ( This is node IP address where POD has been running) sh-4.2$ dig +short google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> @64.101.6.21<http://secure-web.cisco.com/12_fpSm2tjLsSKYpwwBKwkxUxV26kLVzw4LSLJOadVe6uk2SyAHLrQFdbwDp_q1hRi2ZZ22_UQzMx6Gn13jE94WbrgNwcoGjk1C1UUsbQR4FSuS4YXpH3x9bAfXasjN__bB1mA34dPSyaYH7wmYm59zJJfIO9hxHNK3Ph5zGIZfYCKlTFznERHQo6jfgiabublKSCeRY8IZ-52XNb2KJZ29AYZaVAOdWLcsC1iMPMrS0DfGzF66PAi0Lk7qKwI7yn1hsuv4aQ6yoYjR6wX4u4eQtiNhHDZJP738IUBY71FSz45NjqzoGGaYzSYKNsR3jtR14fKZ055Vk0w4_3jnSpPA/http%3A%2F%2F64.101.6.21> sh-4.2$ sh-4.2$ nslookup google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> 64.101.6.21 Server: 64.101.6.21 Address: 64.101.6.21#53 ** server can't find google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com>: REFUSED However DNS queries aginst 2nd server from POD /etc/resolve.conf works fine ( This IP represent our corproate DNS servers borrowed from HOST /etc/resolve.conf) dig +short google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> @144.254.71.184<http://secure-web.cisco.com/19p6byNBGmGumlwT4Wj4uyTgkXVpQANK8_PtcfmSE11Xg4ywecV8Lpvxhrf1AXg85va-gWgDxsE73JptYO3FFTcd5wv2QDw08lwwNBBI885VGFf7wnSjdFYkSkh2ZE8q0n85VsUNOP78gN4zpH50DtTLnIKabFjEuGT50qllGEElCvyxbS5IxqVY7ArWOVLSgiidVFS5UgkAFp_GQvmW8vbFzlgnKFY3VnDUsBbeBpfBX89pd3hoNp_rqcAPOKu6JzZR3FbMPfzBOXBkUYPSzxUkTWLOzdS24jiXscsjDxLMWSEARy8JVlOqF9GiSjrbGj3uHPdcOOP2BBoFGefUViQ/http%3A%2F%2F144.254.71.184> 216.58.204.110 sh-4.2$ nslookup google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> 144.254.71.184 Server: 144.254.71.184 Address: 144.254.71.184#53 Non-authoritative answer: Name: google.com<http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> Address: 216.58.204.110 2. Service resolution working as expected. However different DNS clients behaving differently with and without service FQDN. Dig doesn’t working without FQDN, Dig doesn't check the search path by default - you have to ask for it (+search) sh-4.2$ dig kong-database2 ;; QUESTION SECTION: ;kong-database2. IN A with FQDN it is working sh-4.2$ dig kong-database2.oneid-rtp.svc.cluster.local ;; ANSWER SECTION: kong-database2.oneid-rtp.svc.cluster.local. 30 IN A 172.29.2.1 nslookup working with or without FQDN sh-4.2$ nslookup kong-database2 Server: 64.101.6.21 Address: 64.101.6.21#53 Non-authoritative answer: Name: kong-database2.oneid-rtp.svc.cluster.local Address: 172.29.2.1 sh-4.2$ nslookup kong-database2.oneid-rtp.svc.cluster.local Server: 64.101.6.21 Address: 64.101.6.21#53 Non-authoritative answer: Name: kong-database2.oneid-rtp.svc.cluster.local Address: 172.29.2.1 -- Srinivas Kotaru _______________________________________________ dev mailing list [email protected]<mailto:[email protected]> http://secure-web.cisco.com/1sF-0XzCWryG3Hv81VcrVwa2Jv0gTMu5W3IorJnKpcXRIrqKj0hhPX3sk7jOsXOHF6K1EtxjweaI3X7frj6pWe9AB1MfDa7uWWRjSphboIq_RnazZj-D3PYdlmZqBSEpkxA_JjeacBbPQs7_sIGBpKXC2hnPniA4f58GUzixzqK7JlSSvoDiiAQI9TJneVzQkbR8viwL6jUslGYpfhbi6JMQmYw7_YnANZH89E9e5BQZ-DsKK9Z-DAYzBMF9bCX25Een8ruggF5uaSWhCQFEjzBAUww_SCnR9xxnYDNy1h1FPKk--Dw3evbeAxwqkx3fq/http%3A%2F%2Flists.openshift.redhat.com/openshiftmm/listinfo/dev<http://secure-web.cisco.com/1lblkU0Edy4a8zeZvVrF2LQzpmAkZntH98FQSKiPiZpMNSGJNSDAVMcscFRnIaqZWmA7cYoeKv9mYQH3aK2MndnyGWepjroL5O_kXe6hZ_6_q50XStOyXuZ7k8hEv-wYk0hzR8jsHDnmXFUv92Bbmufp7Uo0lWbTL_B7r2cHqUTDVqdrLmEUfXgHwjQ19norIJw9cnHRAh22e6K86AAy7OR3fVr9N6SgPyDpIMKubPnWggG2uTTXiEC0ILFVVTOuKzRdDxFS29JE8sXDoPZGNfslSOQya5-fJQ6FqLzvd9sn-jWMQU3ZkfP10zq8Lcys8zJSBwfrvhRkZMND4V7jjaQ/http%3A%2F%2Flists.openshift.redhat.com%2Fopenshiftmm%2Flistinfo%2Fdev>
_______________________________________________ dev mailing list [email protected] http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
