FQDN objects generate excessive amount of DNS queries

[Kaspars_Zibarts]

For those using "new" type FQDN objects - have you noticed or looked at DNS stats from the gateway? The other day our DNS guy asked us why one of our VS gateways was generating 25 million (!) DNS queries per day.

So had to dig into it. 

I can't say that we use FQDN objects excessively (~200 objects, all new type) but we still like them.

As for calculation, after enabling WSDNSD debug following was concluded:

• each FQDN object will create 10 DNS queries every minute (not too sure why but all 10 are sent at the same time nearly)
• each FQDN object then will be added prefix "www" and another 10 queries sent to DNS every mi minute
• lastly each successful response will trigger reverse lookup

Numbers seem to add up:

(200 x 10 x 2) x 60 x 24 = 5.76M

If you now add rerverse lookups then 20M is not a surprise number.

Seems very inefficient design if you ask me. Would be interesting to hear from CP why there is a need for such excessive amount of DNS queries.

We are running R80.10 take 203 VSX + MDS

[Martin_Valenta]

I think that only upgrade r80.20 might solve this...

https://community.checkpoint.com/fyrhh23835/attachments/fyrhh23835/general-management/7968/1/FQDN-A-...

[Kaspars_Zibarts]

Awesome, thanks heaps Martin!

[Julien_Tissot]

Hello!

The link is no more working. Can you please update it?

Thanks