Bug 1933711 - EgressDNS: Keep short lived records at most 30s
Summary: EgressDNS: Keep short lived records at most 30s
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 4.8
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
: 4.8.0
Assignee: Juan Luis de Sousa-Valadas
QA Contact: huirwang
Depends On:
TreeView+ depends on / blocked
Reported: 2021-03-01 14:18 UTC by huirwang
Modified: 2021-07-27 22:49 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Egress networkpolicies with dnsName rules would refresh the IP list corresponding to that name once the TTL of the record expired. Consequence: The cache may expire before the record and the next query may return a different ip address list causing the new connection packets' to be dropped Fix: For records that last less than one hour, query them every 30 seconds. For records that last over an hour, query them ever 30 minutes. Result: The cache is less likely to expire making drops less likely as well. Besides because it happens every 30 seconds new connections that fail will probably wait less to be reopened.
Clone Of:
Last Closed: 2021-07-27 22:48:44 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Github openshift sdn pull 263 0 None open Bug 1933711: EgressDNS: Keep short lived records at most 30s 2021-03-10 15:19:41 UTC
Red Hat Product Errata RHSA-2021:2438 0 None None None 2021-07-27 22:49:03 UTC

Description huirwang 2021-03-01 14:18:40 UTC
Description of problem:

Use this bug to track PR:https://github.com/openshift/sdn/pull/263 , and seperate from DOC bug https://bugzilla.redhat.com/show_bug.cgi?id=1876376

Comment 5 errata-xmlrpc 2021-07-27 22:48:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.