On Sun, Aug 25, 2024 at 03:09:06PM +0300, Danil Smirnov wrote: > Hi Dominik,
Hello Danil, (dnsmasq mailinglist in Cc: and Reply-To:_ > On Sun, Aug 25, 2024 at 2:51 PM Dominik Derigs wrote: > > > Many possibilities and the more we know, the better. I really doubt there > > is anything systematic concerning dnsmasq in docker but rather something > > related to the particular container or the particular configuration. > > > > My bad - I didn't mention, that the container worked just fine for months > until we completed the migration and put it under full load. > > So this freezing issue happens only under significant load (so perhaps it's > some race condition), e.g. this is our stats for 4 hours: > > dnsmasq: time 1724557801 > dnsmasq: cache size 150, 0/711 cache insertions re-used unexpired cache > entries. > dnsmasq: queries forwarded 4744, queries answered locally 3823 Those amounts in four hours means on average an interval of more as two seconds. A half request per second is not what I would call "full load". > dnsmasq: queries for authoritative zones 0 > dnsmasq: DNSSEC per-query subqueries HWM 0 > dnsmasq: DNSSEC per-query crypto work HWM 0 > dnsmasq: DNSSEC per-RRSet signature fails HWM 0 > dnsmasq: pool memory in use 672, max 1248, allocated 2400 > dnsmasq: child processes for TCP requests: in use 0, highest since last > SIGUSR1 0, max allowed 20. > dnsmasq: server X.X.X.X#53: queries sent 4160, retried 3, failed 0, nxdomain > replies 196, avg. latency 2ms > dnsmasq: server X.X.X.X#53: queries sent 2412, retried 2, failed 0, nxdomain > replies 72, avg. latency 4ms > I suggest to follow up this message with a why and what on having dnsmasq in docker. That is to create more common interrest on this mailinglist for the combo you want to use. Otherwise the status quo will be "Not my problem, I don't use dnsmasq in docker" or "Not my problem, I have a working dnsmasq in docker". Please do that for dnsmasq community and for a future version of you in your current situation which has to start an email thread with "There is some evidence on the Internet that dnsmasq doesn't play well with docker". Groeten Geert Stappers -- Silence is hard to parse _______________________________________________ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss
