API tools faq
paste
Advertisement
kamaok

Coredns resolve external domains

kamaok
Jan 4th, 2023 (edited)
1,223
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 19.31 KB | None | 0 0
raw download clone embed print report
  1. Внутри пода ИНОГДА не происходит резолв имен, ответ которых превышает 512 байт
  2. В этот проблемный момент в логах coredns-подов
  3.  
  4. # kubectl logs --tail=1 -f -l app.kubernetes.io/name=coredns -n kube-system
  5. [ERROR] plugin/errors: 2 www.googleapis.com. A: dial tcp 10.31.70.1:53: i/o timeout
  6. [ERROR] plugin/errors: 2 www.googleapis.com. AAAA: dial tcp 10.31.70.2:53: i/o timeout
  7.  
  8.  
  9. При этом резолв таких имен(размер ответа которых превышает 512 байт) ВСЕГДА выполняется успешно
  10. - при запросе с самих нод
  11. - при запросе с того же пода если вместо IP-адреса сервиса kube-dns(10.96.0.10) в поле nameserver использовать
  12. ip-адреса dns-серверов, которые указаны в /etc/resolv.conf на нодах (10.31.70.1,10.31.70.2) или общедоступные DNS-сервера(например, 8.8.8.8)
  13.  
  14. То есть
  15. pods -- > coredns pod -- > node dns config -- > node nameserver -- > Иногда timeout(неуспешное разименование)
  16. pods -- > node nameserver(10.31.70.1,10.31.70.2) -- > Всегда OK
  17. pods -- > Public DNS(8.8.8.8) -- > Всегда OK
  18.  
  19. Резолв доменных имен, размер ответа которых не превышает 512 байт и соответственно не требует от клиента на
  20. переключение протокола с UDP на TCP выполняется ВСЕГДА успешно
  21.  
  22. За неуспешным запросом через секунду может быть успешный запрос, который в течение какого-то короткого времени,похоже,
  23. что 30 секунд после последнего успешного запроса, (Это время кеширования ответа coredns-подом согласно его настройке в конфигурационном файле (cache 30))
  24. остается успешным, после истечения 30 секунд, если выполнить запрос, то он может быть,как успешным, так и не успешным
  25.  
  26. При успешном резолве через tcpdump внутри пода можно увидеть, что переключение протокола выполняется успешно
  27.  
  28. Сначала важные, по-моему мнению строки
  29. 17:44:23.092391 - proto UDP (17), length 515
  30. 17:44:23.093225 - proto TCP (6), length 1090
  31. 17:44:23.115249 - proto UDP (17), length 431
  32.  
  33. Полный вывод tcpdump
  34. 17:44:23.089986 eth0  Out IP (tos 0x0, ttl 64, id 51214, offset 0, flags [DF], proto UDP (17), length 64)
  35.     nginx-5db77f8f67-9cccp.34049 > kube-dns.kube-system.svc.cluster.local.53: [bad udp cksum 0xec01 -> 0xe200!] 13864+ A? www.googleapis.com. (36)
  36. 17:44:23.090023 eth0  Out IP (tos 0x0, ttl 64, id 51215, offset 0, flags [DF], proto UDP (17), length 64)
  37.     nginx-5db77f8f67-9cccp.34049 > kube-dns.kube-system.svc.cluster.local.53: [bad udp cksum 0xec01 -> 0x92e4!] 34089+ AAAA? www.googleapis.com. (36)
  38. 17:44:23.092391 eth0  In  IP (tos 0x0, ttl 63, id 44025, offset 0, flags [DF], proto UDP (17), length 515)
  39.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.34049: [bad udp cksum 0xedc4 -> 0x454e!] 13864| q: A? www.googleapis.com. 16/4/5 www.googleapis.com. [30s] A 216.58.212.170, www.googleapis.com. [30s] A 142.250.184.202, www.googleapis.com. [30s] A 142.250.186.42, www.googleapis.com. [30s] A 142.250.186.106, www.googleapis.com. [30s] A 216.58.212.138, www.googleapis.com. [30s] A 142.250.186.138, www.googleapis.com. [30s] A 142.250.184.234, www.googleapis.com. [30s] A 172.217.23.106, www.googleapis.com. [30s] A 142.250.186.74, www.googleapis.com. [30s] A 172.217.18.10, www.googleapis.com. [30s] A 142.250.186.170, www.googleapis.com. [30s] A 172.217.16.202, www.googleapis.com. [30s] A 142.250.74.202, www.googleapis.com. [30s] A 172.217.16.138, www.googleapis.com. [30s] A 142.250.185.234, www.googleapis.com. [30s] A 142.250.185.202 ns: googleapis.com. [30s] NS ns2.google.com., googleapis.com. [30s] NS ns1.google.com., googleapis.com. [30s] NS ns4.google.com., googleapis.com. [30s] NS ns3.google.com. ar: ns4.google.com. [30s] AAAA 2001:4860:4802:38::a, ns1.google.com. [30s] AAAA 2001:4860:4802:32::a, ns3.google.com. [30s] AAAA 2001:4860:4802:36::a, ns2.google.com. [30s] A 216.239.34.10, ns1.google.com. [30s] A 216.239.32.10 (487)
  40. 17:44:23.092669 eth0  Out IP (tos 0x0, ttl 64, id 58008, offset 0, flags [DF], proto TCP (6), length 60)
  41.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [S], cksum 0xebf2 (incorrect -> 0x0670), seq 1445726375, win 28800, options [mss 1440,sackOK,TS val 3694783532 ecr 0,nop,wscale 7], length 0
  42. 17:44:23.092750 eth0  In  IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 60)
  43.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.48624: Flags [S.], cksum 0xebf2 (incorrect -> 0xbace), seq 80597764, ack 1445726376, win 28560, options [mss 1440,sackOK,TS val 1568741165 ecr 3694783532,nop,wscale 7], length 0
  44. 17:44:23.092757 eth0  Out IP (tos 0x0, ttl 64, id 58009, offset 0, flags [DF], proto TCP (6), length 52)
  45.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x5836), seq 1, ack 1, win 225, options [nop,nop,TS val 3694783532 ecr 1568741165], length 0
  46. 17:44:23.092787 eth0  Out IP (tos 0x0, ttl 64, id 58010, offset 0, flags [DF], proto TCP (6), length 128)
  47.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [P.], cksum 0xec36 (incorrect -> 0xaf48), seq 1:77, ack 1, win 225, options [nop,nop,TS val 3694783532 ecr 1568741165], length 76 [prefix length(36) != length(74)] (invalid)
  48. 17:44:23.092797 eth0  In  IP (tos 0x0, ttl 63, id 33028, offset 0, flags [DF], proto TCP (6), length 52)
  49.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.48624: Flags [.], cksum 0xebea (incorrect -> 0x57eb), seq 1, ack 77, win 224, options [nop,nop,TS val 1568741165 ecr 3694783532], length 0
  50. 17:44:23.093225 eth0  In  IP (tos 0x0, ttl 63, id 33029, offset 0, flags [DF], proto TCP (6), length 1090)
  51.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.48624: Flags [P.], cksum 0xeff8 (incorrect -> 0xf45f), seq 1:1039, ack 77, win 224, options [nop,nop,TS val 1568741166 ecr 3694783532], length 1038 13864* q: A? www.googleapis.com. 16/4/8 www.googleapis.com. [30s] A 172.217.18.10, www.googleapis.com. [30s] A 172.217.16.202, www.googleapis.com. [30s] A 142.250.185.202, www.googleapis.com. [30s] A 172.217.23.106, www.googleapis.com. [30s] A 142.250.186.106, www.googleapis.com. [30s] A 142.250.186.170, www.googleapis.com. [30s] A 172.217.16.138, www.googleapis.com. [30s] A 142.250.184.234, www.googleapis.com. [30s] A 216.58.212.170, www.googleapis.com. [30s] A 142.250.185.234, www.googleapis.com. [30s] A 142.250.186.138, www.googleapis.com. [30s] A 142.250.186.74, www.googleapis.com. [30s] A 142.250.74.202, www.googleapis.com. [30s] A 142.250.184.202, www.googleapis.com. [30s] A 142.250.186.42, www.googleapis.com. [30s] A 216.58.212.138 ns: googleapis.com. [30s] NS ns2.google.com., googleapis.com. [30s] NS ns1.google.com., googleapis.com. [30s] NS ns4.google.com., googleapis.com. [30s] NS ns3.google.com. ar: ns3.google.com. [30s] A 216.239.36.10, ns3.google.com. [30s] AAAA 2001:4860:4802:36::a, ns1.google.com. [30s] AAAA 2001:4860:4802:32::a, ns2.google.com. [30s] A 216.239.34.10, ns2.google.com. [30s] AAAA 2001:4860:4802:34::a, ns1.google.com. [30s] A 216.239.32.10, ns4.google.com. [30s] AAAA 2001:4860:4802:38::a, ns4.google.com. [30s] A 216.239.38.10 (1036)
  52. 17:44:23.093231 eth0  Out IP (tos 0x0, ttl 64, id 58011, offset 0, flags [DF], proto TCP (6), length 52)
  53.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x53c9), seq 77, ack 1039, win 242, options [nop,nop,TS val 3694783533 ecr 1568741166], length 0
  54. 17:44:23.115249 eth0  In  IP (tos 0x0, ttl 63, id 44027, offset 0, flags [DF], proto UDP (17), length 431)
  55.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.34049: [bad udp cksum 0xed70 -> 0x31de!] 34089 q: AAAA? www.googleapis.com. 4/4/8 www.googleapis.com. [30s] AAAA 2a00:1450:4001:806::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:813::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:802::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:82a::200a ns: googleapis.com. [30s] NS ns4.google.com., googleapis.com. [30s] NS ns3.google.com., googleapis.com. [30s] NS ns1.google.com., googleapis.com. [30s] NS ns2.google.com. ar: ns1.google.com. [30s] AAAA 2001:4860:4802:32::a, ns4.google.com. [30s] A 216.239.38.10, ns2.google.com. [30s] AAAA 2001:4860:4802:34::a, ns3.google.com. [30s] A 216.239.36.10, ns4.google.com. [30s] AAAA 2001:4860:4802:38::a, ns2.google.com. [30s] A 216.239.34.10, ns1.google.com. [30s] A 216.239.32.10, ns3.google.com. [30s] AAAA 2001:4860:4802:36::a (403)
  56. 17:44:28.098327 eth0  In  IP (tos 0x0, ttl 63, id 33030, offset 0, flags [DF], proto TCP (6), length 90)
  57.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.48624: Flags [P.], cksum 0xec10 (incorrect -> 0xc442), seq 1039:1077, ack 77, win 224, options [nop,nop,TS val 1568746171 ecr 3694783533], length 38 34089 ServFail- q: AAAA? www.googleapis.com. 0/0/0 (36)
  58. 17:44:28.098339 eth0  Out IP (tos 0x0, ttl 64, id 58012, offset 0, flags [DF], proto TCP (6), length 52)
  59.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x2c89), seq 77, ack 1077, win 242, options [nop,nop,TS val 3694788538 ecr 1568746171], length 0
  60. 17:44:28.098432 eth0  Out IP (tos 0x0, ttl 64, id 58013, offset 0, flags [DF], proto TCP (6), length 52)
  61.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [F.], cksum 0xebea (incorrect -> 0x2c88), seq 77, ack 1077, win 242, options [nop,nop,TS val 3694788538 ecr 1568746171], length 0
  62. 17:44:28.098514 eth0  In  IP (tos 0x0, ttl 63, id 33031, offset 0, flags [DF], proto TCP (6), length 52)
  63.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.48624: Flags [F.], cksum 0xebea (incorrect -> 0x2c99), seq 1077, ack 78, win 224, options [nop,nop,TS val 1568746171 ecr 3694788538], length 0
  64. 17:44:28.098520 eth0  Out IP (tos 0x0, ttl 64, id 58014, offset 0, flags [DF], proto TCP (6), length 52)
  65.     nginx-5db77f8f67-9cccp.48624 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x2c87), seq 78, ack 1078, win 242, options [nop,nop,TS val 3694788538 ecr 1568746171], length 0
  66.  
  67.  
  68. При НЕУСПЕШНОМ резолве через tcpdump внутри пода
  69.  
  70. # tcpdump -vvv -i any port 53
  71. tcpdump: data link type LINUX_SLL2
  72. tcpdump: listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
  73.  
  74. Сначала важные, по-моему мнению строки
  75. 17:52:22.487441 - proto UDP (17), length 515
  76. 17:52:22.489677 - proto UDP (17), length 431
  77. 17:52:27.490508 eth0  In  IP (tos 0x0, ttl 63, id 24642, offset 0, flags [DF], proto TCP (6), length 90)
  78.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [P.], cksum 0xec10 (incorrect -> 0xc9ce), seq 1:39, ack 77, win 224, options [nop,nop,TS val 1569225563 ecr 3695262927], length 38 587 ServFail- q: A? www.googleapis.com. 0/0/0 (36)
  79. 17:52:32.494666 eth0  In  IP (tos 0x0, ttl 63, id 24643, offset 0, flags [DF], proto TCP (6), length 90)
  80.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [P.], cksum 0xec10 (incorrect -> 0x7277), seq 39:77, ack 77, win 224, options [nop,nop,TS val 1569230567 ecr 3695267930], length 38 12874 ServFail- q: AAAA? www.googleapis.com. 0/0/0 (36)    
  81.  
  82. Полный вывод tcpdump
  83. 17:52:22.463502 eth0  Out IP (tos 0x0, ttl 64, id 24415, offset 0, flags [DF], proto UDP (17), length 64)
  84.     nginx-5db77f8f67-9cccp.55019 > kube-dns.kube-system.svc.cluster.local.53: [bad udp cksum 0xec01 -> 0xc3f3!] 587+ A? www.googleapis.com. (36)
  85. 17:52:22.463548 eth0  Out IP (tos 0x0, ttl 64, id 24416, offset 0, flags [DF], proto UDP (17), length 64)
  86.     nginx-5db77f8f67-9cccp.55019 > kube-dns.kube-system.svc.cluster.local.53: [bad udp cksum 0xec01 -> 0x93d9!] 12874+ AAAA? www.googleapis.com. (36)
  87. 17:52:22.487441 eth0  In  IP (tos 0x0, ttl 62, id 1270, offset 0, flags [DF], proto UDP (17), length 515)
  88.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.55019: [udp sum ok] 587| q: A? www.googleapis.com. 16/4/5 www.googleapis.com. [30s] A 142.250.74.202, www.googleapis.com. [30s] A 142.250.185.202, www.googleapis.com. [30s] A 142.250.185.234, www.googleapis.com. [30s] A 172.217.18.10, www.googleapis.com. [30s] A 142.250.184.234, www.googleapis.com. [30s] A 142.250.185.170, www.googleapis.com. [30s] A 142.250.186.138, www.googleapis.com. [30s] A 172.217.23.106, www.googleapis.com. [30s] A 142.250.186.42, www.googleapis.com. [30s] A 142.250.185.138, www.googleapis.com. [30s] A 172.217.18.106, www.googleapis.com. [30s] A 172.217.16.202, www.googleapis.com. [30s] A 142.250.185.74, www.googleapis.com. [30s] A 142.250.185.106, www.googleapis.com. [30s] A 172.217.16.138, www.googleapis.com. [30s] A 142.250.181.234 ns: googleapis.com. [30s] NS ns3.google.com., googleapis.com. [30s] NS ns2.google.com., googleapis.com. [30s] NS ns1.google.com., googleapis.com. [30s] NS ns4.google.com. ar: ns2.google.com. [30s] A 216.239.34.10, ns4.google.com. [30s] A 216.239.38.10, ns4.google.com. [30s] AAAA 2001:4860:4802:38::a, ns3.google.com. [30s] AAAA 2001:4860:4802:36::a, ns2.google.com. [30s] AAAA 2001:4860:4802:34::a (487)
  89. 17:52:22.487580 eth0  Out IP (tos 0x0, ttl 64, id 2122, offset 0, flags [DF], proto TCP (6), length 60)
  90.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [S], cksum 0xebf2 (incorrect -> 0x7253), seq 4107965796, win 28800, options [mss 1440,sackOK,TS val 3695262927 ecr 0,nop,wscale 7], length 0
  91. 17:52:22.487686 eth0  In  IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 60)
  92.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [S.], cksum 0xebf2 (incorrect -> 0x394f), seq 992950619, ack 4107965797, win 28560, options [mss 1440,sackOK,TS val 1569220560 ecr 3695262927,nop,wscale 7], length 0
  93. 17:52:22.487699 eth0  Out IP (tos 0x0, ttl 64, id 2123, offset 0, flags [DF], proto TCP (6), length 52)
  94.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0xd6b6), seq 1, ack 1, win 225, options [nop,nop,TS val 3695262927 ecr 1569220560], length 0
  95. 17:52:22.487727 eth0  Out IP (tos 0x0, ttl 64, id 2124, offset 0, flags [DF], proto TCP (6), length 128)
  96.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [P.], cksum 0xec36 (incorrect -> 0xb485), seq 1:77, ack 1, win 225, options [nop,nop,TS val 3695262927 ecr 1569220560], length 76 [prefix length(36) != length(74)] (invalid)
  97. 17:52:22.487736 eth0  In  IP (tos 0x0, ttl 63, id 24641, offset 0, flags [DF], proto TCP (6), length 52)
  98.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [.], cksum 0xebea (incorrect -> 0xd66b), seq 1, ack 77, win 224, options [nop,nop,TS val 1569220560 ecr 3695262927], length 0
  99. 17:52:22.489677 eth0  In  IP (tos 0x0, ttl 62, id 1273, offset 0, flags [DF], proto UDP (17), length 431)
  100.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.55019: [udp sum ok] 12874 q: AAAA? www.googleapis.com. 4/4/8 www.googleapis.com. [30s] AAAA 2a00:1450:4001:800::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:80e::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:810::200a, www.googleapis.com. [30s] AAAA 2a00:1450:4001:831::200a ns: googleapis.com. [30s] NS ns4.google.com., googleapis.com. [30s] NS ns2.google.com., googleapis.com. [30s] NS ns1.google.com., googleapis.com. [30s] NS ns3.google.com. ar: ns2.google.com. [30s] AAAA 2001:4860:4802:34::a, ns3.google.com. [30s] A 216.239.36.10, ns4.google.com. [30s] AAAA 2001:4860:4802:38::a, ns1.google.com. [30s] A 216.239.32.10, ns1.google.com. [30s] AAAA 2001:4860:4802:32::a, ns3.google.com. [30s] AAAA 2001:4860:4802:36::a, ns2.google.com. [30s] A 216.239.34.10, ns4.google.com. [30s] A 216.239.38.10 (403)
  101. 17:52:27.490508 eth0  In  IP (tos 0x0, ttl 63, id 24642, offset 0, flags [DF], proto TCP (6), length 90)
  102.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [P.], cksum 0xec10 (incorrect -> 0xc9ce), seq 1:39, ack 77, win 224, options [nop,nop,TS val 1569225563 ecr 3695262927], length 38 587 ServFail- q: A? www.googleapis.com. 0/0/0 (36)
  103. 17:52:27.490528 eth0  Out IP (tos 0x0, ttl 64, id 2125, offset 0, flags [DF], proto TCP (6), length 52)
  104.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0xaf2e), seq 77, ack 39, win 225, options [nop,nop,TS val 3695267930 ecr 1569225563], length 0
  105. 17:52:32.494666 eth0  In  IP (tos 0x0, ttl 63, id 24643, offset 0, flags [DF], proto TCP (6), length 90)
  106.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [P.], cksum 0xec10 (incorrect -> 0x7277), seq 39:77, ack 77, win 224, options [nop,nop,TS val 1569230567 ecr 3695267930], length 38 12874 ServFail- q: AAAA? www.googleapis.com. 0/0/0 (36)
  107. 17:52:32.494676 eth0  Out IP (tos 0x0, ttl 64, id 2126, offset 0, flags [DF], proto TCP (6), length 52)
  108.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x87f0), seq 77, ack 77, win 225, options [nop,nop,TS val 3695272934 ecr 1569230567], length 0
  109. 17:52:32.494747 eth0  Out IP (tos 0x0, ttl 64, id 2127, offset 0, flags [DF], proto TCP (6), length 52)
  110.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [F.], cksum 0xebea (incorrect -> 0x87ef), seq 77, ack 77, win 225, options [nop,nop,TS val 3695272934 ecr 1569230567], length 0
  111. 17:52:32.495513 eth0  In  IP (tos 0x0, ttl 63, id 24644, offset 0, flags [DF], proto TCP (6), length 52)
  112.     kube-dns.kube-system.svc.cluster.local.53 > nginx-5db77f8f67-9cccp.54774: Flags [F.], cksum 0xebea (incorrect -> 0x87ee), seq 77, ack 78, win 224, options [nop,nop,TS val 1569230568 ecr 3695272934], length 0
  113. 17:52:32.495538 eth0  Out IP (tos 0x0, ttl 64, id 2128, offset 0, flags [DF], proto TCP (6), length 52)
  114.     nginx-5db77f8f67-9cccp.54774 > kube-dns.kube-system.svc.cluster.local.53: Flags [.], cksum 0xebea (incorrect -> 0x87ec), seq 78, ack 78, win 225, options [nop,nop,TS val 3695272935 ecr 1569230568], length 0
  115.  
  116.  
  117. Конфигурационный файл core-dns имеет вид
  118. # kubectl get cm coredns -n kube-system -o yaml
  119. apiVersion: v1
  120. data:
  121.   Corefile: |
  122.    .:53 {
  123.         errors
  124.         health {
  125.            lameduck 5s
  126.         }
  127.         ready
  128.         kubernetes cluster.local in-addr.arpa ip6.arpa {
  129.            pods insecure
  130.            fallthrough in-addr.arpa ip6.arpa
  131.            ttl 30
  132.         }
  133.         prometheus :9153
  134.         forward . /etc/resolv.conf {
  135.            max_concurrent 1000
  136.         }
  137.         cache 30
  138.         loop
  139.         reload
  140.         loadbalance
  141.     }
  142. kind: ConfigMap
  143. metadata:
  144.   name: coredns
  145.   namespace: kube-system
  146.  
  147.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!