Hi,

i set forward-zone for consul domain in the recursor, but queries fail.

Tested consul nodes are 192.168.200.205-207.
Tested patroni nodes (vith consul agent) are 192.168.200.201-202, current master is test-patroni-02.sub.domain.tld (.202)
Tested recursor node 192.168.200.55

Working query via dnsmasq (local) test-patroni-01 node:

dnsmasq: using nameserver 192.168.200.205#8600 for domain consul
dnsmasq: reading /etc/resolv.conf
dnsmasq: using nameserver 192.168.200.205#8600 for domain consul
dnsmasq: using nameserver 192.168.200.55#53
dnsmasq: read /etc/hosts - 8 names
dnsmasq: query[A] master.testcluster.service.consul from ::1
dnsmasq: forwarded master.testcluster.service.consul to 192.168.200.205#8600
dnsmasq: reply master.testcluster.service.consul is <CNAME>
dnsmasq: reply test-patroni-02.sub.domain.tld is 192.168.200.202

I'm getting the same result using dig against local/remote consul as via dnsmasq.

Pdns-recursor config snippet:
...
forward-zones+=...
forward-zones+=...
forward-zones+=...
forward-zones+=consul=192.168.200.205:8600;192.168.200.206:8600;192.168.200.207:8600 #tryied with forward-zones-recure too

Failing query via pdns-recursor, client to pdns:
09:00:28.995582 IP 192.168.200.201.39364 > 192.168.200.55.domain: 62027+ [1au] A? master.testcluster.service.consul. (74) 09:00:30.980241 IP 192.168.200.55.domain > 192.168.200.201.39364: 62027 ServFail 0/0/1 (62)

Failing query via pdns-recursor, pdns to consul:
09:00:28.996364 IP 192.168.200.55.50085 > 192.168.200.205.8600: 36627+% [1au] A? master.testcluster.service.consul. (62) 09:00:29.007576 IP 192.168.200.205.8600 > 192.168.200.55.50085: 36627* 2/0/1 CNAME test-patroni-02.intr.cortex.cz., A 192.168.200.202 (122) 09:00:29.021812 IP 192.168.200.55.33770 > 192.168.200.206.8600: 35806+% [1au] DS? service.consul. (43) 09:00:29.023654 IP 192.168.200.206.8600 > 192.168.200.55.33770: 35806 NXDomain* 0/1/1 (93) 09:00:29.037301 IP 192.168.200.55.34295 > 192.168.200.207.8600: 64101+% [1au] DS? testcluster.service.consul. (55) 09:00:29.042391 IP 192.168.200.207.8600 > 192.168.200.55.34295: 64101* 2/0/1 CNAME test-patroni-01.sub.domain.tld., A 192.168.200.201 (115) 09:00:29.048536 IP 192.168.200.55.59932 > 192.168.200.206.8600: 58685+% [1au] DS? service.consul. (43) 09:00:29.049277 IP 192.168.200.206.8600 > 192.168.200.55.59932: 58685 NXDomain* 0/1/1 (93) 09:00:29.083938 IP 192.168.200.55.17764 > 192.168.200.206.8600: 57798+% [1au] DS? testcluster.service.consul. (55) 09:00:29.087032 IP 192.168.200.206.8600 > 192.168.200.55.17764: 57798* 2/0/1 CNAME test-patroni-02.sub.domain.tld., A 192.168.200.202 (115) 09:00:30.907453 IP 192.168.200.55.61916 > 192.168.200.206.8600: 27508+% [1au] DS? service.consul. (43) 09:00:30.908477 IP 192.168.200.206.8600 > 192.168.200.55.61916: 27508 NXDomain* 0/1/1 (93) 09:00:30.944741 IP 192.168.200.55.44601 > 192.168.200.206.8600: 21673+% [1au] DS? testcluster.service.consul. (55) 09:00:30.947549 IP 192.168.200.206.8600 > 192.168.200.55.44601: 21673* 2/0/1 CNAME test-patroni-02.sub.domain.tld., A 192.168.200.202 (115) 09:00:30.961804 IP 192.168.200.55.40184 > 192.168.200.206.8600: 22082+% [1au] DS? service.consul. (43) 09:00:30.963022 IP 192.168.200.206.8600 > 192.168.200.55.40184: 22082 NXDomain* 0/1/1 (93)

Where is problem?

Thank you.

_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to