Bug 1468192 – cloud-init is performing DNS queries to *random* domains such as does-not-exist.example.com and example.invalid

Bug 1468192 - cloud-init is performing DNS queries to *random* domains such as does-not-exist.example.com and example.invalid

Summary:	cloud-init is performing DNS queries to random domains such as does-not-exi...

Status:	ASSIGNED

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	cloud-init (Show other bugs)
Sub Component:
Version:	7.2
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	rc
Target Release:	---
Assigned To:	Ryan McCabe
QA Contact:	Vratislav Hutsky
Docs Contact:

URL:
Whiteboard:
Keywords:	Triaged

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-07-06 05:18 EDT by Robin Cernin
Modified:	2017-08-08 10:23 EDT (History)
CC List:	8 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Launchpad	1658734	None	None	None	2017-07-06 05:18 EDT

Groups: None (edit)

Description Robin Cernin 2017-07-06 05:18:34 EDT

Description of problem:

cloud-init is performing DNS queries to *random* domains such as does-not-exist.example.com and example.invalid upon the start to verify the DNS redirection is configured.

Either environment with IDS or without DNS server configured this might be issue as when doing a lookup it might be flagged as potentially suspicious or causing timeouts, which can lasts hundred of seconds.

Version-Release number of selected component (if applicable):

All

How reproducible:

restart VM check for the DNS requests.

Additional info:

We are looking for a patch that would possibly disable the function by setting the empty list during the checks.

Note You need to log in before you can comment on or make changes to this bug.