Update / Issue resolved:
Further investigation showed that this was not a Linux kernel regression.
The issue was caused by a firewall policy/routing configuration in a
dual-WAN setup. The affected DNS resolvers were routed through one WAN
interface while SNAT was incorrectly using the IP address of the other
WAN interface. This resulted in intermittent and eventually persistent
outgoing traffic failures from the DNS resolvers.
The Docker 127.0.0.11 DNS timeouts were only a symptom of the upstream
DNS failures.
After correcting the firewall policy (matching next-hop and outgoing-
interface SNAT), DNS resolution is working normally again, including
repeated tests with uncached/random DNS queries.
This bug can be closed as Invalid. Sorry for the false report.
** Changed in: linux (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2166071
Title:
Regression in 6.8.0-138-generic: Docker embedded DNS 127.0.0.11 times
out, works with 6.8.0-137-generic
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2166071/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
