Hi Srinivas, You can look at the dnsmasq configuration on the node to see what is happening.
Basically dnsmasq should have 2 configurations -- one for ".local", more or less, and one for everything else. During the installation process (if we are talking about OCP), dnsmasq is configured to resolve anything that is **NOT** .local via the original resolver configured for the node. Anything that is .local should be resolved via the kubernetes service IP address Do you have two config files in the dnsmasq.d folder (or whatever) on your node? If so, what do their contents look like? Erik M Jacobs, RHCA Principal Technical Marketing Manager, OpenShift Red Hat, Inc. Phone: 646.462.3745 Email: [email protected] AOL Instant Messenger: ejacobsatredhat Twitter: @ErikonOpen Freenode: thoraxe On Wed, Feb 1, 2017 at 12:50 PM, Srinivas Naga Kotaru (skotaru) < [email protected]> wrote: > > > If all containers forwarding to nodes for name resolution and nodes > forwarding to master for DNS resolution, what master does for external > queries for which master is not authorities? Am wonder how curl and ping is > working from containers for dig/lookup not working unless we mention @name > server in the query. > > > > Can someone explain how name resolution works in below scenarios > > - POD to corporate resources > > - POD to external resources > > > > What master nameserver does ( dnsmasq) in above occasions? > > > > -- > > *Srinivas Kotaru* > > > > *From: *"[email protected]" <[email protected]> > *Date: *Tuesday, January 31, 2017 at 1:24 PM > *To: *Srinivas Naga Kotaru <[email protected]> > *Cc: *dev <[email protected]> > *Subject: *[SUSPICIOUS] Re: service discover - always confuse > > > > Including the list correctly. > > > > On Tue, Jan 31, 2017 at 4:06 PM, Clayton Coleman <[email protected]> > wrote: > > > > > On Jan 30, 2017, at 1:51 AM, Srinivas Naga Kotaru (skotaru) < > [email protected]> wrote: > > Hi > > > > Observed 2 different behaviors in my platform. not sure this is expected > behavior or not. Can you clarify for below behaviors? > > > > 1. Name resolution not working for external domains although ping > and curl commands working as expected > > > > Examples: > > > > # oc rsh kong-app3-792309857-1i4xk > > > > # ping -c1 google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > PING google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > (216.58.204.110) 56(84) bytes of data. > > 64 bytes from par10s28-in-f14.1e100.net > <http://secure-web.cisco.com/1CFI4O1dpduXxSBAvCZF5OaKY1YkUPCVRmxKXA0ssOpNS7NKzcBuyebhEP4yzszEo3W4WvK7Zn_0J4IU7SOVDWYUP0C-LXnFdy2Z9dMsEZZr2CGbMH8bIpQcAX6qshoTW99z5uB7SUMfLXIS8Isg7-8ys3x_8nmKB3KtM91mOAh--k8jcCteJ74Z52-xx_GBqF68MfseCsJAv-FXUxOenNhNpfz7O46XVkdrGAEVpQMltWAfWT-oIStz6Q-xbbmo3TRqAeM5b6GGI0YpA8E3O_1-lHmh9pSXQlH9ZqMNLnJBuCGwOgModIaHgL_Fci6kuaUT1hFucVPP1SCKWl7cdKA/http%3A%2F%2Fpar10s28-in-f14.1e100.net> > (216.58.204.110): icmp_seq=1 ttl=47 time=85.7 ms > > > > #$ curl -IL google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > HTTP/1.1 302 Found > > Cache-Control: private > > Location: http://secure-web.cisco.com/161IUJ29rLtqDu4qCdZKtaRCUMt8xd > ybiQ5Y6_yw383Yl_tbsNfQlk0Vh6yvGPFyTquM8wx4hmm0 > H5gcrzQu0YnLl2iMjdjWo9DyQDq6KFY8-7PF6P3I2Fft9aw3SK32g4c7vK0h9EA > apyOyYLY1oy99qUWkhaUcsU4m-KACvLiuGZkObHP_v20FGn114xPVUn4Yk9hQeAikGfkp_ > 7d00ZCdrpqIEmghKo1B-Lbby2ZStgpIH6uVuuZ5WWUMPi2fteW > Hl40sauFqvLCfYesgsrLpEuYCfo7ABVo9MJhM-UiC13clZD_ > EEU9aNwAzOEOA0RMwYyBE7O8-r_QiSuXbiVQ/http%3A%2F%2Fwww. > google.com.co%2F%3Fgfe_rd=cr&ei=6d6OWOCgJPLU8ge42JWoCA > <http://secure-web.cisco.com/1F4ob_uMFD6hdjdNFXM9Ko2rCShVKCTtPr7aeJ2BFXt-d8jr5AVGFPWr5UQq-Tutfbas672ro73plh2hN7xd9Lcu5wFv4wLcj2GSyhEzByWcqxG-SXI4_75Hb_dMsBmnbwlKIMoyNhSPtalsTv5IjmOnGfMEMb4uE9k-lcwA_QBf4JM5klw3ziDn1raG82tcfxhl-S3jUFx3i4gp2OoWYCRNAG5dMHrWvYYedY4tXcH73CLczl-ko_J7PAmi7IoY1Bfjh8QiyJxJZDLMZuz4FmOAcSBaYBjNVsBhwi3OgbY9QBxItX_0QFVfDom3OAh_d/http%3A%2F%2Fwww.google.com.co%2F%3Fgfe_rd%3Dcr%26ei%3D6d6OWOCgJPLU8ge42JWoCA> > > Date: Mon, 30 Jan 2017 06:36:25 GMT > > Content-Length: 262 > > Content-Type: text/html; charset=UTF-8 > > Via: 1.1 rtp5-dmz-wsa-1-mgmt.cisco.com:80 > <http://secure-web.cisco.com/1j1jeBO-osvVCpC1b2j9uZRgi3qaMTRjyDg7rcBGnSUEH5jx0N_Jryn7uZSL38q2Ad5wTuPDSxRLJXCg8knX4f3pGvwHyeaQqwYABjRU861sM32w3MClkcTW6CIdl7i-NKSHBnEglAwmT_BnGD2vdxuzvmby6HEXind9ZUtF0VXeoFi7JGoc7APslIh1eM3jN7WUGTO-NPgIMnf3_vSb_CE1Y0V-2hJSCW2WcA1xCN7gvPtWYoxPIjcweJIB9nmGcSAcBJxJHcEeWjGFT9iCuMRRTobw8-pWYH2cPZLzfp3ZrODpj1Ggo5zMUXrO5n4vFPvFrmuUSTibrJsz-BxY0Eg/http%3A%2F%2Frtp5-dmz-wsa-1-mgmt.cisco.com%3A80> > (Cisco-WSA/8.8.0-085) > > Connection: keep-alive > > > > HTTP/1.1 200 OK > > Date: Mon, 30 Jan 2017 06:36:26 GMT > > Expires: -1 > > Cache-Control: private, max-age=0 > > P3P: CP="This is not a P3P policy! See https://secure-web.cisco.com/ > 1nNNAY8NaXQ_HY9Ceu5NUguXCfoaeRiJOY2NCTkjkJvw3H2QaM9aRsOl98qCTJJFFCrjkiJI > pJGADvMjlmo4-pxaYivTai36ss3x4j4oplbinne9nKbvwTjAnfvmHNG_ > W9PjJS6qNEg1XxoMm5Ok7bpR41TTR58E0aRn01o5Jnpn9hbsUMMCNLCXv81c > ckxF_MQ7vDmXLGs6wi42QJhjA4-34KWUoYskIiKq2EEVYY- > 8yFeT4tGs9Jy6a6VpQzWBpii4X5nu-TCizsXtt6WDz_ki1tHEUA4qxoNIbcIhIu9KRbGUI41_ > 6oVBG8aFGgL7lcIuIxOur20iKnA8XBencfw/https%3A%2F%2Fwww. > google.com%2Fsupport/accounts/answer/151657?hl=en > <https://secure-web.cisco.com/1mjmCQ3nZsmm7FP0MnGkwsycte10gCVyd-gSRzgvp2Lo9ePKDKNIJC_d2yX-hkVJ8YZLtrZFav-kIpiD3YN-E_jI1-vff-WkgCBmv49mWhR_al4IriNnfzqY4ldxqi9hyC7yYsaeoaKKN9oEacmhvmIcjdjivNUmg_vejHfDeKXjvFiQoshErJOiMh2DEc6qf9elVeFQmeeAwskvt1nj-JubLVDdMyk1SAns8Ul11HuFJdeZZLclersJpShrDzPXvI0KppkUvQm9KjbNI8uKxY_zRx3GttEXDd1XyOn1rQiuuw9cKOWB69L7dkBxQLxsAL8sqNihdG2GbYcaWpldpfw/https%3A%2F%2Fwww.google.com%2Fsupport%2Faccounts%2Fanswer%2F151657%3Fhl%3Den> > for more info." > > Server: gws > > X-XSS-Protection: 1; mode=block > > X-Frame-Options: SAMEORIGIN > > Set-Cookie: NID=95=pwFoBQb-ktya5LeVlXGLKPJX2N-fLE_ > oIw37Wq2F7FFOeuJp0rObVHRJw7jRg9luz3Jq4f3CQadMWr6RonTJot0oxSEcx- > NGKS8cDaksuT5t3mqTtPZaKb20HRjn9ffF; expires=Tue, 01-Aug-2017 06:36:26 > GMT; path=/; domain=.google.com.co > <http://secure-web.cisco.com/1bmgC32MvYdwiPxBxWjj6WmbVc2uwOhYlNggw7boMUdWw2ECJFAzDF5qwUZqv-QcsvMHkrbaNPfsBeIZRSYryBETVWwI-U2WQr39rzWCEaazwrdMLQ6CHY8fyMIPAXUcDOT2_22NQ646cAr7X1P9Tw2AfNySSRG27UPA3lG2HgPJJacC41xaL2Bpc-fh2mKWTPXQwzFcNId6UVpaksSWjlHJ8dR_Q_ZrFY3h3yVsetuWKvOTZb8GLB7L_yHuQ6tymytYURIOuvWvhRL2v6N58uktdWqVjtHqHizsSGBGLuyzpFZ-b9NEFZuv1hoQvPzJ4zLbSsehe-SQ3avChyy5HBQ/http%3A%2F%2Fgoogle.com.co>; > HttpOnly > > Accept-Ranges: none > > Vary: Accept-Encoding > > Transfer-Encoding: chunked > > Content-Type: text/html; charset=ISO-8859-1 > > Via: 1.1 rtp5-dmz-wsa-1-mgmt.cisco.com:80 > <http://secure-web.cisco.com/1j1jeBO-osvVCpC1b2j9uZRgi3qaMTRjyDg7rcBGnSUEH5jx0N_Jryn7uZSL38q2Ad5wTuPDSxRLJXCg8knX4f3pGvwHyeaQqwYABjRU861sM32w3MClkcTW6CIdl7i-NKSHBnEglAwmT_BnGD2vdxuzvmby6HEXind9ZUtF0VXeoFi7JGoc7APslIh1eM3jN7WUGTO-NPgIMnf3_vSb_CE1Y0V-2hJSCW2WcA1xCN7gvPtWYoxPIjcweJIB9nmGcSAcBJxJHcEeWjGFT9iCuMRRTobw8-pWYH2cPZLzfp3ZrODpj1Ggo5zMUXrO5n4vFPvFrmuUSTibrJsz-BxY0Eg/http%3A%2F%2Frtp5-dmz-wsa-1-mgmt.cisco.com%3A80> > (Cisco-WSA/8.8.0-085) > > Connection: keep-alive > > > > # cat /etc/resolv.conf > > search oneid-rtp.svc.cluster.local svc.cluster.local cluster.local > cisco.com > <http://secure-web.cisco.com/1z18rp_v6osqHiyLp6ljULckcPs3WCf8WlUP8oySxRpZyOaNhx6Zaqe5v-qMVt9mtoV_ZeiTWfPrmuzPIjbGmMlQxYHn87-fdDQzxL5Xp99YVoDDGbcxDOE3UvosQQXgmy3tPldVEegS0CCZKg7feWwCniuwHru-e5Q7I4Ai8HjYmZX4MZd9w6UMEBL_D9nnX3R5RTP8W7t8Mg2F5snARVXK_XPSvcEDUVtTL94vSoiNcKy9Enm_33hEjIRwopF9ogayOyS6of27quKU6ak-dYOnu4UtwuWam8vDxwBHqfLiXwF4acnjcYzPr7hE0lt1OlN1glqT0loXQsIs6XQcd8g/http%3A%2F%2Fcisco.com> > > nameserver 64.101.6.21 > > nameserver 144.254.71.184 > > nameserver 173.38.200.100 > > nameserver 173.38.165.13 > > options timeout:1 attempts:1 > > options ndots:5 > > > > > > # dig google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > > > ; <<>> DiG 9.9.4-RedHat-9.9.4-38.el7_3.1 <<>> google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 21380 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > > > > Refused is not normal - does your node have dnsmasq and if so, are there > any config changes there? We are moving more to having all pods only speak > to the node via dnsmasq > > > > > > ;; QUESTION SECTION: > > ;google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > . IN A > > > > ;; Query time: 1 msec > > ;; SERVER: 64.101.6.21#53(64.101.6.21) > > ;; WHEN: Mon Jan 30 06:38:07 UTC 2017 > > ;; MSG SIZE rcvd: 28 > > > > # nslookup google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > Server: 64.101.6.21 > > Address: 64.101.6.21#53 > > > > ** server can't find google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com>: > REFUSED > > > > #host gogole.com > <http://secure-web.cisco.com/1cXnUBgGjAnhrHsyBjUmKV-vCfJyV8M0rdVM0kpf8-BR-y4xxPhHR7ad3cJkdaA1oYfIe8RgELRjRFNou7AxydyXuf3sfpv35Jh8f2WT85bJ-Hz0rMq0Aw6XKiaiagW5bMjGcfq4RNM8nUsweh2l3z2_Fs9hKvsOD2cgeCBgSptMfvJS90L2B13489dZ33eHU2MFx_nxZ6aBlLK5sCR_ZD2PBkoM7aPbOLucqXeX1uVd4FrTTTlEBvkas1OzzggeaOrDZ7AyaPZhPt6C6KhJMAa9bO8FePzuaUYo4EQh1MxQAPMDFppRbQMNJ5SJoVD_ysdMoOdPrp2jseusRBXbZGA/http%3A%2F%2Fgogole.com> > > Host gogole.com > <http://secure-web.cisco.com/1cXnUBgGjAnhrHsyBjUmKV-vCfJyV8M0rdVM0kpf8-BR-y4xxPhHR7ad3cJkdaA1oYfIe8RgELRjRFNou7AxydyXuf3sfpv35Jh8f2WT85bJ-Hz0rMq0Aw6XKiaiagW5bMjGcfq4RNM8nUsweh2l3z2_Fs9hKvsOD2cgeCBgSptMfvJS90L2B13489dZ33eHU2MFx_nxZ6aBlLK5sCR_ZD2PBkoM7aPbOLucqXeX1uVd4FrTTTlEBvkas1OzzggeaOrDZ7AyaPZhPt6C6KhJMAa9bO8FePzuaUYo4EQh1MxQAPMDFppRbQMNJ5SJoVD_ysdMoOdPrp2jseusRBXbZGA/http%3A%2F%2Fgogole.com> > not found: 5(REFUSED) > > > > Queries against 1st server from POD /etc/resolve.conf ( This is node IP > address where POD has been running) > > > > sh-4.2$ dig +short google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > @64.101.6.21 > <http://secure-web.cisco.com/12_fpSm2tjLsSKYpwwBKwkxUxV26kLVzw4LSLJOadVe6uk2SyAHLrQFdbwDp_q1hRi2ZZ22_UQzMx6Gn13jE94WbrgNwcoGjk1C1UUsbQR4FSuS4YXpH3x9bAfXasjN__bB1mA34dPSyaYH7wmYm59zJJfIO9hxHNK3Ph5zGIZfYCKlTFznERHQo6jfgiabublKSCeRY8IZ-52XNb2KJZ29AYZaVAOdWLcsC1iMPMrS0DfGzF66PAi0Lk7qKwI7yn1hsuv4aQ6yoYjR6wX4u4eQtiNhHDZJP738IUBY71FSz45NjqzoGGaYzSYKNsR3jtR14fKZ055Vk0w4_3jnSpPA/http%3A%2F%2F64.101.6.21> > > sh-4.2$ > > > > sh-4.2$ nslookup google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > 64.101.6.21 > > Server: 64.101.6.21 > > Address: 64.101.6.21#53 > > > > ** server can't find google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com>: > REFUSED > > > > However DNS queries aginst 2nd server from POD /etc/resolve.conf works > fine ( This IP represent our corproate DNS servers borrowed from HOST > /etc/resolve.conf) > > > > dig +short google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > @144.254.71.184 > <http://secure-web.cisco.com/19p6byNBGmGumlwT4Wj4uyTgkXVpQANK8_PtcfmSE11Xg4ywecV8Lpvxhrf1AXg85va-gWgDxsE73JptYO3FFTcd5wv2QDw08lwwNBBI885VGFf7wnSjdFYkSkh2ZE8q0n85VsUNOP78gN4zpH50DtTLnIKabFjEuGT50qllGEElCvyxbS5IxqVY7ArWOVLSgiidVFS5UgkAFp_GQvmW8vbFzlgnKFY3VnDUsBbeBpfBX89pd3hoNp_rqcAPOKu6JzZR3FbMPfzBOXBkUYPSzxUkTWLOzdS24jiXscsjDxLMWSEARy8JVlOqF9GiSjrbGj3uHPdcOOP2BBoFGefUViQ/http%3A%2F%2F144.254.71.184> > > 216.58.204.110 > > > > sh-4.2$ nslookup google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > 144.254.71.184 > > Server: 144.254.71.184 > > Address: 144.254.71.184#53 > > > > Non-authoritative answer: > > Name: google.com > <http://secure-web.cisco.com/1u7i8XNuQksEt2rnqXP1-jsT2yGDprPA8nZOLjazQFhursnj3aKlpEJYmbk6ZHHVwa0lSI6KXQ1Mc0lf0iOmQwe-VFh7voHUFmbrYjos7Vu2zT56DapPDbFM0x0yv3kvHHQtAqjA1aWgrZdFsTbhpOuV34sq0FJBmsZSZn__7JJCvm5q4dUtOVKzzlqJptH-1ZGivEpxeQBqHdCjPbqTcuwghuHnAi9TlZqA3XtBUTkvslbJANSqLeBRpKX584z40vWX0DKA4i1qkrEc7UR3XVmuBCZz3gOXgOKhZg-unr8HKCKPyJaIZq_9xzDawPmgEQp7FS2FVOTmv5cDZgi0fAw/http%3A%2F%2Fgoogle.com> > > Address: 216.58.204.110 > > > > 2. Service resolution working as expected. However different DNS > clients behaving differently with and without service FQDN. Dig doesn’t > working without FQDN, > > > > Dig doesn't check the search path by default - you have to ask for it > (+search) > > > > > > > > sh-4.2$ dig kong-database2 > > ;; QUESTION SECTION: > > ;kong-database2. > IN A > > > > with FQDN it is working > > > > sh-4.2$ dig kong-database2.oneid-rtp.svc.cluster.local > > ;; ANSWER SECTION: > > kong-database2.oneid-rtp.svc.cluster.local. 30 IN A 172.29.2.1 > > > > > > nslookup working with or without FQDN > > > > sh-4.2$ nslookup kong-database2 > > Server: 64.101.6.21 > > Address: 64.101.6.21#53 > > > > Non-authoritative answer: > > Name: kong-database2.oneid-rtp.svc.cluster.local > > Address: 172.29.2.1 > > > > sh-4.2$ nslookup kong-database2.oneid-rtp.svc.cluster.local > > Server: 64.101.6.21 > > Address: 64.101.6.21#53 > > > > Non-authoritative answer: > > Name: kong-database2.oneid-rtp.svc.cluster.local > > Address: 172.29.2.1 > > > > > > -- > > *Srinivas Kotaru* > > _______________________________________________ > dev mailing list > [email protected] > http://secure-web.cisco.com/1sF-0XzCWryG3Hv81VcrVwa2Jv0gTMu5W3 > IorJnKpcXRIrqKj0hhPX3sk7jOsXOHF6K1EtxjweaI3X7frj6pWe9AB1MfDa > 7uWWRjSphboIq_RnazZj-D3PYdlmZqBSEpkxA_JjeacBbPQs7_ > sIGBpKXC2hnPniA4f58GUzixzqK7JlSSvoDiiAQI9TJneVzQkbR8viwL6jUs > lGYpfhbi6JMQmYw7_YnANZH89E9e5BQZ-DsKK9Z-DAYzBMF9bCX25Een8ruggF5uaSWhCQ > FEjzBAUww_SCnR9xxnYDNy1h1FPKk--Dw3evbeAxwqkx3fq/http%3A%2F% > 2Flists.openshift.redhat.com/openshiftmm/listinfo/dev > <http://secure-web.cisco.com/1lblkU0Edy4a8zeZvVrF2LQzpmAkZntH98FQSKiPiZpMNSGJNSDAVMcscFRnIaqZWmA7cYoeKv9mYQH3aK2MndnyGWepjroL5O_kXe6hZ_6_q50XStOyXuZ7k8hEv-wYk0hzR8jsHDnmXFUv92Bbmufp7Uo0lWbTL_B7r2cHqUTDVqdrLmEUfXgHwjQ19norIJw9cnHRAh22e6K86AAy7OR3fVr9N6SgPyDpIMKubPnWggG2uTTXiEC0ILFVVTOuKzRdDxFS29JE8sXDoPZGNfslSOQya5-fJQ6FqLzvd9sn-jWMQU3ZkfP10zq8Lcys8zJSBwfrvhRkZMND4V7jjaQ/http%3A%2F%2Flists.openshift.redhat.com%2Fopenshiftmm%2Flistinfo%2Fdev> > > > > _______________________________________________ > dev mailing list > [email protected] > http://lists.openshift.redhat.com/openshiftmm/listinfo/dev > >
_______________________________________________ dev mailing list [email protected] http://lists.openshift.redhat.com/openshiftmm/listinfo/dev
