Bug 1709178
| Summary: | DNS names at egressnetworkpolicies causing heavily querying DNS servers | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Abhishek <aabhishe> | |
| Component: | Networking | Assignee: | Casey Callendrello <cdc> | |
| Networking sub component: | openshift-sdn | QA Contact: | zhaozhanqi <zzhao> | |
| Status: | CLOSED ERRATA | Docs Contact: | ||
| Severity: | urgent | |||
| Priority: | urgent | CC: | aos-bugs, cdc, dmace, ksalunkh, rekhan, sponnaga, vlaad | |
| Version: | 3.11.0 | Keywords: | Reopened | |
| Target Milestone: | --- | Flags: | cdc:
needinfo-
|
|
| Target Release: | 3.11.z | |||
| Hardware: | x86_64 | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | ||
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1768702 (view as bug list) | Environment: | ||
| Last Closed: | 2019-11-19 14:36:02 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1768702 | |||
|
Description
Abhishek
2019-05-13 07:06:01 UTC
Possible fix: https://github.com/openshift/origin/pull/22855 Verified this bug on v3.11.128 with steps: 1. setup one cluster with 1 master with compute node and infra node 2. Create project z1 and test pod on compute node 3. Create the egressnetworkpolicy in z1 with https://raw.githubusercontent.com/openshift-qe/v3-testfiles/master/networking/egress-ingress/dns-egresspolicy1.json 4. rsh in the test pod ping yahoo.com 5. During the ping. capture DNS package in compute node and infra node with `tcpdump -i eth0 -nn port 53` 6. Check all package are captured with compute node and No package can be captured. 7. also using winshark to capture the package on compute node and did not found the dns.resp.ttl==0 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:1753 I made a mistake and failed to merge the patch to the origin release-3.11 branch and so never shipped in 3.x. *** Bug 1741295 has been marked as a duplicate of this bug. *** Hello, Any updates on this? The patch landed in the 3.11 branch here: https://github.com/openshift/origin/pull/23904 Moving to ON_QA. Sorry about that. |