-
Notifications
You must be signed in to change notification settings - Fork 452
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.
Already on GitHub? Sign in to your account
DNS resolvers for IPv6 gets removed during boot [OpenStack] #8690
Comments
I'm not sure what the issue is, but it might be easier for you do the initial triage to help me with that, as it's hard to dig into configuration with zero knowledge about the context. Following the guide you can yourself see what are the all configuration sources and how it got merged. E.g. for the resolvers:
If you see an issue at this point (something got merged wrong, wrong priority), you can either fix it in on your side, or report an issue. The remaining piece is translation of OpenStack metadata to Talos network configuration, an easy way here is to compare the OpenStack metadata document (which you already have) and what Talos translated it to, which you can read with |
I might guess there's a conflict between DNS resolvers coming from DHCP, OpenStack metadata and your machine config, but some data gathered as I outlined above would help a lot. |
Yes, you are right. Operator before Platform. I've attached the outputs. So, from the data you can see that DHCP4 takes present over platform (IPv6 SLAAC).
talos/internal/app/machined/pkg/runtime/v1alpha1/platform/openstack/testdata/network.json Lines 143 to 153 in 78b48eb
Would it be natural for OpenStack to include all DNS from DHCP and also append the unique adresses from Without explicitly setting the DNS inside Thoughts? Thank you for taking the time to reply. |
This one seems similar to the As I get from your dump, OpenStack returns a full list of DNS servers (2 IPv4 + 2 IPv6), but configures the interface to run DHCPv4, which obviously only return 2 IPv4 DNS servers (can't return IPv6). So in this particular case, I wonder if we should take some special rules to merge the lists of resolvers, as clearly we could be smart enough to preserve the IPv6 resolvers. I will think about this case a bit more. |
Bug Report
Thanks for the help so far. 馃檹馃徎
Description
In OpenStack I have two subnets, one IPv4 and one for IPv6. On both I have set two DNS servers, in total four. However, the resolvers for IPv6 gets removed. Also, the network setup flips back and forth, so it's difficult for me to understand what is happening.
E.g. I have like five
[talos] setting resolvers {"component": "controller-runtime", "controller": "network.ResolverSpecController", "resolvers":
messages and fourupdated dns server nameservers {"component": "dns-resolve-cache", "addrs"
messages.Some messages about the IPv4 address being removed/added twice. So for me it's so strange to see that the interface is reconfigured so many times during a boot. 馃槃
Currently on Cilium. I can try Flannel too?
Ed1t: seems that because of this, looking up IPv6 takes time, resulting in some time before it proceeds. Does it use some fallback when IPv6 resolvers are not added?
talosctl logs dns-resolve-cache
does not show lookups.Logs
routes
routespec
dmesg
from all three nodes - cp3 is fresh node todaydns_issue.tgz - Must be de-encrypted.
Ed1t: ran with metadata service as the initial cluster was with cloud-drive. This gave a different result:
debug_cp2_metadata.tgz - decrypt
Now it can't find the resolvers for IPv6 at all. 馃
network_data.json - decrypt
Environment
The text was updated successfully, but these errors were encountered: