New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
dns: Set --tofqdns-min-ttl to zero by default #21439
Conversation
This pull request has been automatically marked as stale because it |
This pull request has not seen any activity since it was marked stale. |
3a1b6ef
to
db8afc6
Compare
c5d75db
to
64e0f6d
Compare
64e0f6d
to
1ba64a1
Compare
/test |
1ba64a1
to
1eb930a
Compare
/test |
This pull request has been automatically marked as stale because it |
This pull request has been automatically marked as stale because it |
This pull request has not seen any activity since it was marked stale. |
@michi-covalent We still want this, right? Any reason for why it's blocked? |
1eb930a
to
b047981
Compare
sorry for the delay chris, i just forgot about this. marked ready for review ✅ |
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No worries, all good Michi 🚀
This commit changes the default value of --tofqdns-min-ttl from 3600 seconds to zero. This means Cilium honors the TTLs returned from the upstream DNS server by default. Explicitly configure --tofqdns-min-ttl if you need to preserve the previous behavior that lets applications create new connections within the pre-defined --tofqdns-min-ttl time window after the DNS TTL is expired. --tofqdns-min-ttl setting is no longer needed since the poll-based DNS implementation has been replaced by the proxy-based implementation. Having the minimum TTL set to 1 hour by default adds unnecessary CPU / memory overhead, as Cilium ends up keeping track of expired DNS info. This is especially problematic when the upstream DNS server returns responses with short TTLs and many unique IP addresses. Co-authored-by: Joe Stringer <joe@cilium.io> Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
b047981
to
72d95c7
Compare
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
amazing
This commit changes the default value of --tofqdns-min-ttl from 3600
seconds to zero. This means Cilium honors the TTLs returned from the
upstream DNS server by default. Explicitly configure --tofqdns-min-ttl
if you need to preserve the previous behavior that lets applications
create new connections within the pre-defined --tofqdns-min-ttl time
window after the DNS TTL is expired.
--tofqdns-min-ttl setting is no longer needed since the poll-based DNS
implementation has been replaced by the proxy-based implementation.
Having the minimum TTL set to 1 hour by default adds unnecessary CPU /
memory overhead, as Cilium ends up keeping track of expired DNS info.
This is especially problematic when the upstream DNS server returns
responses with short TTLs and many unique IP addresses.
Co-authored-by: Joe Stringer joe@cilium.io
Signed-off-by: Michi Mutsuzaki michi@isovalent.com