On 08/09/2026 6:13 pm, Vincent Lefevre wrote:
This won't solve the problem: When nscd is used, /etc/gai.conf
is not accessed at all, as shown by strace. There is just a
connection to "/var/run/nscd/socket".
Are you sure that gai.conf is not read by nscd even if client
applications like wget do not access it directly? However, as you are
describing the issue, editing that file will not help you (I used it as
a workaround a couple of times).
What resolver plugins are configured on your machine?
grep '^hosts:' /etc/nsswitch.conf
In the case of faulty DNS servers I would consider another level of
cache: systemd-resolved or dnsmasq.
When inspecting behavior of DNS servers, I suggest to suppress retries
when you invoke dig. Another idea is to use list of Debian mirrors to
obtain enough host names that are unlikely cached by DNS servers.
Repeating dig for the same host can not unveil some issues.
