Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Kaspars_Zibarts
Employee Employee
Employee

FQDN objects generate excessive amount of DNS queries

For those using "new" type FQDN objects - have you noticed or looked at DNS stats from the gateway? The other day our DNS guy asked us why one of our VS gateways was generating 25 million (!) DNS queries per day.

So had to dig into it. 

I can't say that we use FQDN objects excessively (~200 objects, all new type) but we still like them.

As for calculation, after enabling WSDNSD debug following was concluded:

  • each FQDN object will create 10 DNS queries every minute (not too sure why but all 10 are sent at the same time nearly)
  • each FQDN object then will be added prefix "www" and another 10 queries sent to DNS every mi minute
  • lastly each successful response will trigger reverse lookup

 

Numbers seem to add up:

(200 x 10 x 2) x 60 x 24 = 5.76M

If you now add rerverse lookups then 20M is not a surprise number.

Seems very inefficient design if you ask me. Would be interesting to hear from CP why there is a need for such excessive amount of DNS queries.

We are running R80.10 take 203 VSX + MDS

0 Kudos
3 Replies
Martin_Valenta
Advisor

Kaspars_Zibarts
Employee Employee
Employee

Awesome, thanks heaps Martin!
0 Kudos
Julien_Tissot
Explorer

Hello!

The link is no more working. Can you please update it?

Thanks

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events