topic Re: Slow response from local connections using in Operating System - HP-UX

Slow response from local connections using

vdf — Wed, 20 Jan 2010 08:28:07 GMT

Hi all,

I have a problem in 1 server. If I try a ssh, telnet,ftp,etc to itseft i have to wait for 10-15seg to see the answer "login: "

It only happens with the short name "webap7p" if i try with the webap7p.prod.domain.es it works fine, also with the ip address

I have checked /etc/hosts, /etc/resolv.conf, /etc/nsswitch.conf... and they seem to be ok.

I did some tests moving /etc/resolv.conf and fix the problem but the server only can resolv the /etc/hosts machines...

If i configure /etc/nsswitch.conf with only files the problem continues...I have to delete or move /etc/resolv.conf to get a fast connection to itsetf using short names.

Why does it happend?

Thanks!

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 08:42:05 GMT

Hello,

Try to add the line

192.168.1.1 webap7p

to /etc/hosts. Change 192.168.1.1 to whatever you need.

Also, in your /etc/nsswitch.conf you should have:

hosts: files dns

Order is important.

Best regards,
Horia.

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 08:56:03 GMT

You can also use the directive (in sshd_config add the following line):

UseDNS no

from the man page:

UseDNS Specifies whether sshd(8) should look up the remote host name and
check that the resolved host name for the remote IP address maps
back to the very same IP address. The default is ``yes''.

Best regards,
Horia.

Re: Slow response from local connections using

vdf — Wed, 20 Jan 2010 09:34:34 GMT

Hi,

This is the entry in the /etc/nsswitch.conf:

hosts: files [NOTFOUND=continue UNAVAIL=continue] dns [NOTFOUND=return UNAVAIL=continue TRYAGAIN=return]

and hosts file:

127.0.0.1 localhost loopback
10.40.4.144 webap7p webap7p.prod.airtel.es EJBnetwork
10.40.4.145 webap8p webap8p.prod.airtel.es
10.40.4.146 webdocssi webdocssi.prod.airtel.es
192.168.0.1 webap7phb
192.168.0.2 webap8phb

I trace the telnet command with tusc and "telnet 10.40.4.144" doesn't check /etc/resolv.conf but "telnet webap7p" does...

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 09:43:41 GMT

And telnet 10.40.4.144 does not exhibit slow response?

Horia

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 09:46:18 GMT

In /etc/resolv.conf do you have the line:

domain prod.airtel.es

Horia.

Re: Slow response from local connections using

vdf — Wed, 20 Jan 2010 10:02:50 GMT

telnet 10.40.4.144 works very fast...

Here is my resolv.conf:

search prod.airtel.es des.airtel.es red.airtel.es ing.airtel.es vf-es.internal.vodafone.com es.sedc.internal.vodafone.com
nameserver 10.40.3.143
nameserver 10.10.32.100
nameserver 10.10.37.250

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 10:55:34 GMT

Run nslookup and see how webap7p is resolved.

Horia.

Re: Slow response from local connections using

vdf — Wed, 20 Jan 2010 10:58:10 GMT

It seems that only check the /etc/hosts:

webap7p:/tmp># nslookup webap7p
Using /etc/hosts on: webap7p

looking up FILES
Name: webap7p
Address: 10.40.4.144
Aliases: webap7p.prod.airtel.es, EJBnetwork

But tusc show that it check /etc/resolv.conf too.

Re: Slow response from local connections using

TARUN SHARMA_1 — Wed, 20 Jan 2010 10:59:07 GMT

Try to add the line
192.168.1.1 webap7p
to /etc/hosts.

Re: Slow response from local connections using

TARUN SHARMA_1 — Wed, 20 Jan 2010 11:00:47 GMT

Try to add the below line on the box from where you are running telnet or ssh
192.168.1.1 webap7p
to /etc/hosts

Re: Slow response from local connections using

Horia Chirculescu — Wed, 20 Jan 2010 11:10:40 GMT

Have you tried to insert the line

domain prod.airtel.es

at the beginning of resolv.conf?

Re: Slow response from local connections using

vdf — Wed, 20 Jan 2010 11:12:21 GMT

Hi Tarun,
Why 192.168.1.1? webap7p only has the lan0 configured with 192.168.0.1 and is already configured in /etc/hosts as webap7phb

192.168.0.1 webap7phb

"telnet webap7phb" is also slow..and "telnet localhost" too

127.0.0.1 localhost loopback

But telnet 192.168.0.1 or 127.0.0.1 work fast.

Re: Slow response from local connections using

Steven Schweda — Wed, 20 Jan 2010 14:45:44 GMT

> Run nslookup and see how webap7p is
> resolved.

If the problem lies with DNS, then I'd worry
more about the reverse look-up of your
_client_ system (on the server).

nslookup client_IP_address

Re: Slow response from local connections using

vdf — Wed, 20 Jan 2010 15:11:05 GMT

webap7p:/># nslookup webap7p
Using /etc/hosts on: webap7p

looking up FILES
Name: webap7p
Address: 10.40.4.144
Aliases: webap7p.prod.airtel.es, EJBnetwork

My question is...why does it check resolv.conf if the name is in hosts file and nsswitch.conf if configured correctly to work only locally?

Re: Slow response from local connections using

Bill Hassell — Wed, 20 Jan 2010 19:22:20 GMT

> My question is...why does it check resolv.conf if the name is in hosts file and nsswitch.conf if configured correctly to work only locally?

"work only locally" means that nsswitch.conf has this line (exactly):

hosts: files

I think you'll find nsquery more informative than nslookup. The important setting is in nsswitch.conf where the actions to lookup a hostname are defined. To looki in /etc/hosts first, then DNS, make sure the hosts: line reads:

hosts: files [NOTFOUND=continue UNAVAIL=continue] dns

Then run nsquery to see how the rules are followed:

nsquery hosts webap7p

Re: Slow response from local connections using

rick jones — Thu, 21 Jan 2010 00:25:05 GMT

When ssh, telnet, ftp, etc go to resolve the "short" name you give them - webap7p - the name resolution routines (the DNS ones anyway) will then start to "search" for the complete name. That will be controlled by either the "search" or "domain" lines in the /etc/resolv.conf file.

If you were to take a verbose tusc system call trace, you could probably see a series of names being tried in turn until it got one that resolved. Similarly if you were to install tcpdump and take a packet trace of traffic to/from port 53, you could probably see the sequence of names being searched.

The heuristic (as I recall it) is that if there are two or more "dots" in the name (such as with your webap7p.prod.domain.es) the resolver code will ass-u-me it is a Fully Qualified Domain Name (FQDN) and try that first before messing with its search entries.

Also, if there is a trailing dot - eg foo.bar.baz. the resolver code will also assume it is an FQDN and not step through its search paths at all.

If there is much latency between this system and your DNS servers, or if the search directive in /etc/resolv.conf call for searching external domains, it could quite possibly take a little while to go through the search.

This is all independent of whether or not the actual destination is local to the machine :)

Re: Slow response from local connections using

vdf — Thu, 21 Jan 2010 08:35:06 GMT

Thanks for the answers!

The problem is solved. I changed the dns order in the resolv.conf and now the conections with the short name works perfectly. The problem seems to be in the first dns was setting in the resolv.conf...

Thanks,
Javi

Re: Slow response from local connections using

Horia Chirculescu — Thu, 21 Jan 2010 09:01:08 GMT

Hello,
In this case you should ask the admin which is responsible with the

nameserver 10.40.3.143

to check the DNS setup (reverse lookup problem maybe?).

Best regards
Horia.

Re: Slow response from local connections using

vdf — Thu, 21 Jan 2010 12:21:44 GMT

Maybe...or perhaps a network problem...I'm going to investigate that!

Thanks!