DNS Server Replace

[cp-bc123]

Hi,

I am trying to replace DNS servers IPs on gateways. after I changed IP address of primary and secondary and tertiary DNS server.

I noticed DNS queries were still being made agaisnt the old ones.

How can I force or restart dns service of the gateway to start using the new ones?

if there are proper steps I should take to make this change, can you share please?

[PhoneBoy]

It's possible one or more processes have cached the DNS Servers to use.
You may need to perform a cprestart (which is service impacting) to fix this.

[cp-bc123]

Thank you for the reply.

I did cprestart but not all the cp services come back online . so I ended up rebooting the box as we have HA.

[DR_74]

Hello,

Does the reboot solves your issue?

We have the same behaviour on a R81.10 Gateway (with VSX), and even after changing the DNS servers, we still see requests to the old DNS servers.

Thanks

[Chris_Atkinson]

Yes most likely this will address the issue based on my prior experience. 

[JohAicher]

cpwd_admin stop -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "fw kill wsdnsd"; cpwd_admin start -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "wsdnsd"

[JohAicher]

sk161632

[_Val_]

Uh, so the question was about DNS related to HTTPSi or updatable objects, or both? 

[DR_74]

Hi Val

Exactly the question was about changing the DNS server for the VSX. When we change them from VS0 for all the other vs we notice that we still have requests to the old DNS servers. Show dns show the correct DNS servers

Do we need to reboot or is the a known command to ask to use the new DNS

Regards

[JohAicher]

just run:

cpwd_admin stop -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "fw kill wsdnsd"; cpwd_admin start -name WSDNSD -path "$FWDIR/bin/wsdnsd" -command "wsdnsd"

and you see that the DNS queries goes to the new DNS Server - for all services running on the CP box

[Arskazv]

I did this today, and it worked.

In my opinion, it's a bug. Some sk says, that it's (wsdnsd) always restarted in policy install, but that’s not the case...