Juniper Openstack

vdns: default forwarders shouldnt be set for vdns zone

Bug #1547236 reported by Senthilnathan Murugappan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R2.20
Fix Committed
High
Nipa
Juniper Openstack r2.23 "r2.23"
R2.21.x
Fix Committed
High
Nipa
Juniper Openstack r2.21.2
R2.22.x
Fix Committed
High
Nipa
Juniper Openstack r2.22.2
R3.0
Fix Committed
High
Nipa
Juniper Openstack r3.0.1.0
Trunk
Fix Committed
High
Nipa
Juniper Openstack r3.1.0.0-fcs

Bug Description

Build: 3.0-2711 ubuntu1404 kilo

view "default-domain-TestProject0cEc23-vdnscB9cf5" {
    rrset-order {order random;};
    forwarders {10.84.5.100; 172.21.200.60; 172.29.131.60; };
    zone "juniper.net" IN {
        type master;
        file "/etc/contrail/dns/default-domain-TestProject0cEc23-vdnscB9cf5.juniper.net.zone";
        allow-update {127.0.0.1;};
    };
};

I havent set any forwarders for the vdns but still the underlay dns servers been set as forwarders hence though i had disabled reverse lookup for the vdns, the dns server tries to look it up on the forwarders.

DNSBind Trace from agent:
2016-02-18 12:32:17.225 DnsBindTrace: DNS query sent to named server : 10.84.25.27; xid =3061 IN/A/TestProject6D2DC8-VN0cbFAcC-VM1E382eF.juniper.net/; controller/src/vnsw/agent/services/dns_handler.cc 412
2016-02-18 12:32:17.225 DnsBindTrace: DNS query sent to named server : 10.84.25.28; xid =3062 IN/A/TestProject6D2DC8-VN0cbFAcC-VM1E382eF.juniper.net/; controller/src/vnsw/agent/services/dns_handler.cc 412
2016-02-18 12:32:17.225 DnsBindTrace: Query successful : xid = 3061 IN/A/TestProject6D2DC8-VN0cbFAcC-VM1E382eF.juniper.net/88.22.18.4; controller/src/vnsw/agent/services/dns_handler.cc 562
2016-02-18 12:32:17.225 DnsBindError: Invalid or Response ignored xid 3062 received from DNS server - dropping controller/src/vnsw/agent/services/dns_handler.cc 601
2016-02-18 12:32:17.229 DnsBindTrace: DNS query sent to named server : 10.84.25.27; xid =3063 IN/PTR/4.18.22.88.in-addr.arpa/; controller/src/vnsw/agent/services/dns_handler.cc 412
2016-02-18 12:32:17.229 DnsBindTrace: DNS query sent to named server : 10.84.25.28; xid =3064 IN/PTR/4.18.22.88.in-addr.arpa/; controller/src/vnsw/agent/services/dns_handler.cc 412
2016-02-18 12:32:17.599 DnsBindTrace: Query successful : xid = 3063 IN/PTR/4.18.22.88.in-addr.arpa/4.Red-88-22-18.staticIP.rima-tde.net; controller/src/vnsw/agent/services/dns_handler.cc 562

Revision history for this message
Hari Prasad Killi (haripk) wrote :

Without these, name resolution for anything outside the vdns domain will fail.

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/17600
Submitter: Nipa Kumar (<email address hidden>)

Senthilnathan Murugappan (msenthil)
tags: added: releasenote
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/17600
Committed: http://github.org/Juniper/contrail-controller/commit/638e7b0d43050fd99b39e7d9ca34f7a42d6502c7
Submitter: Zuul
Branch: master

commit 638e7b0d43050fd99b39e7d9ca34f7a42d6502c7
Author: Nipa Kumar <email address hidden>
Date: Mon Feb 22 16:28:59 2016 -0800

Default zones will have an empty forwarders {} list.

1) Add default zone config (A records) with empty forwarders list {}. This results
in contrail-named daemon delegating the subzone using NS records configured.
Adding forwarders list under zone ensure the rule applied for a zone.

Previously as the forwarders list was under view level, for any records
not in local-cache within the zone, resulted in queries being forwarded.

2) Add RR zones (PTR records) with an empty forwarders list. This will result in
DNS not trying to resolve the PTR records when RR is disabled.

3) When dns forwarder is configured, this will apply at view level and zone
level will not be empty anymore.

4) When dns forwarder is configures, zone level will be empty only if RR is
diabled for PTR records.

view "default-domain-vdns-1" {
rrset-order {order random;};
virtual-forwarder "default-domain-vdns-2";
zone "1.1.21.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.1.1.21.in-addr.arpa.zone";
allow-update {127.0.0.1;};
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.new.net.zone";
allow-update {127.0.0.1;};
};
};

view "default-domain-vdns-2" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "1.1.31.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.1.1.31.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "4.4.4.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.4.4.4.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.new.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

view "default-domain-vdns-ns-record" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "2.2.2.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.2.2.2.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "6.6.6.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.6.6.6.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "abc.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.abc.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

Change-Id: I3a573c771d09a247a0627fab3734af7f176f66ff
Closes-Bug:1547236
Closes-Bug:1542516

Changed in juniperopenstack:
milestone: r3.0-fcs → r3.1.0.0-fcs
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.0

Review in progress for https://review.opencontrail.org/18493
Submitter: Nipa Kumar (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R2.22.x

Review in progress for https://review.opencontrail.org/18494
Submitter: Nipa Kumar (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R2.21.x

Review in progress for https://review.opencontrail.org/18495
Submitter: Nipa Kumar (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R2.20

Review in progress for https://review.opencontrail.org/18496
Submitter: Nipa Kumar (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/18493
Committed: http://github.org/Juniper/contrail-controller/commit/ac4e108f61cbdd283077a7702577a3517869933a
Submitter: Zuul
Branch: R3.0

commit ac4e108f61cbdd283077a7702577a3517869933a
Author: Nipa Kumar <email address hidden>
Date: Mon Feb 22 16:28:59 2016 -0800

Default zones will have an empty forwarders {} list.

1) Add default zone config (A records) with empty forwarders list {}. This results
in contrail-named daemon delegating the subzone using NS records configured.
Adding forwarders list under zone ensure the rule applied for a zone.

Previously as the forwarders list was under view level, for any records
not in local-cache within the zone, resulted in queries being forwarded.

2) Add RR zones (PTR records) with an empty forwarders list. This will result in
DNS not trying to resolve the PTR records when RR is disabled.

3) When dns forwarder is configured, this will apply at view level and zone
level will not be empty anymore.

4) When dns forwarder is configures, zone level will be empty only if RR is
diabled for PTR records.

view "default-domain-vdns-1" {
rrset-order {order random;};
virtual-forwarder "default-domain-vdns-2";
zone "1.1.21.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.1.1.21.in-addr.arpa.zone";
allow-update {127.0.0.1;};
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.new.net.zone";
allow-update {127.0.0.1;};
};
};

view "default-domain-vdns-2" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "1.1.31.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.1.1.31.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "4.4.4.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.4.4.4.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.new.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

view "default-domain-vdns-ns-record" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "2.2.2.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.2.2.2.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "6.6.6.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.6.6.6.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "abc.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.abc.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

Change-Id: I3a573c771d09a247a0627fab3734af7f176f66ff
Closes-Bug:1547236
Closes-Bug:1542516

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/18496
Committed: http://github.org/Juniper/contrail-controller/commit/a6ec84cec82bd8ff7649b1836a0a542148914b48
Submitter: Zuul
Branch: R2.20

commit a6ec84cec82bd8ff7649b1836a0a542148914b48
Author: Nipa Kumar <email address hidden>
Date: Mon Feb 22 16:28:59 2016 -0800

Default zones will have an empty forwarders {} list.

1) Add default zone config (A records) with empty forwarders list {}. This results
in contrail-named daemon delegating the subzone using NS records configured.
Adding forwarders list under zone ensure the rule applied for a zone.

Previously as the forwarders list was under view level, for any records
not in local-cache within the zone, resulted in queries being forwarded.

2) Add RR zones (PTR records) with an empty forwarders list. This will result in
DNS not trying to resolve the PTR records when RR is disabled.

3) When dns forwarder is configured, this will apply at view level and zone
level will not be empty anymore.

4) When dns forwarder is configures, zone level will be empty only if RR is
diabled for PTR records.

view "default-domain-vdns-1" {
rrset-order {order random;};
virtual-forwarder "default-domain-vdns-2";
zone "1.1.21.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.1.1.21.in-addr.arpa.zone";
allow-update {127.0.0.1;};
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.new.net.zone";
allow-update {127.0.0.1;};
};
};

view "default-domain-vdns-2" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "1.1.31.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.1.1.31.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "4.4.4.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.4.4.4.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.new.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

view "default-domain-vdns-ns-record" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "2.2.2.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.2.2.2.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "6.6.6.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.6.6.6.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "abc.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.abc.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

Change-Id: I3a573c771d09a247a0627fab3734af7f176f66ff
Closes-Bug:1547236
Closes-Bug:1542516

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/18494
Committed: http://github.org/Juniper/contrail-controller/commit/60ba27177ed5b6ed810c4f0bf969584ea240ecb9
Submitter: Zuul
Branch: R2.22.x

commit 60ba27177ed5b6ed810c4f0bf969584ea240ecb9
Author: Nipa Kumar <email address hidden>
Date: Mon Feb 22 16:28:59 2016 -0800

Default zones will have an empty forwarders {} list.

1) Add default zone config (A records) with empty forwarders list {}. This results
in contrail-named daemon delegating the subzone using NS records configured.
Adding forwarders list under zone ensure the rule applied for a zone.

Previously as the forwarders list was under view level, for any records
not in local-cache within the zone, resulted in queries being forwarded.

2) Add RR zones (PTR records) with an empty forwarders list. This will result in
DNS not trying to resolve the PTR records when RR is disabled.

3) When dns forwarder is configured, this will apply at view level and zone
level will not be empty anymore.

4) When dns forwarder is configures, zone level will be empty only if RR is
diabled for PTR records.

view "default-domain-vdns-1" {
rrset-order {order random;};
virtual-forwarder "default-domain-vdns-2";
zone "1.1.21.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.1.1.21.in-addr.arpa.zone";
allow-update {127.0.0.1;};
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.new.net.zone";
allow-update {127.0.0.1;};
};
};

view "default-domain-vdns-2" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "1.1.31.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.1.1.31.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "4.4.4.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.4.4.4.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.new.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

view "default-domain-vdns-ns-record" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "2.2.2.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.2.2.2.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "6.6.6.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.6.6.6.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "abc.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.abc.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

Change-Id: I3a573c771d09a247a0627fab3734af7f176f66ff
Closes-Bug:1547236
Closes-Bug:1542516

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/18495
Committed: http://github.org/Juniper/contrail-controller/commit/a8d0e0384f9cae91046d53efbab7001c980610d7
Submitter: Zuul
Branch: R2.21.x

commit a8d0e0384f9cae91046d53efbab7001c980610d7
Author: Nipa Kumar <email address hidden>
Date: Mon Feb 22 16:28:59 2016 -0800

Default zones will have an empty forwarders {} list.

1) Add default zone config (A records) with empty forwarders list {}. This results
in contrail-named daemon delegating the subzone using NS records configured.
Adding forwarders list under zone ensure the rule applied for a zone.

Previously as the forwarders list was under view level, for any records
not in local-cache within the zone, resulted in queries being forwarded.

2) Add RR zones (PTR records) with an empty forwarders list. This will result in
DNS not trying to resolve the PTR records when RR is disabled.

3) When dns forwarder is configured, this will apply at view level and zone
level will not be empty anymore.

4) When dns forwarder is configures, zone level will be empty only if RR is
diabled for PTR records.

view "default-domain-vdns-1" {
rrset-order {order random;};
virtual-forwarder "default-domain-vdns-2";
zone "1.1.21.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.1.1.21.in-addr.arpa.zone";
allow-update {127.0.0.1;};
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-1.new.net.zone";
allow-update {127.0.0.1;};
};
};

view "default-domain-vdns-2" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "1.1.31.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.1.1.31.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "4.4.4.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.4.4.4.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "new.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-2.new.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

view "default-domain-vdns-ns-record" {
rrset-order {order random;};
forwarders {8.8.8.8; 10.84.5.100; 172.21.200.60; 172.29.131.60; };
zone "2.2.2.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.2.2.2.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "6.6.6.in-addr.arpa." IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.6.6.6.in-addr.arpa.zone";
allow-update {127.0.0.1;};
forwarders { };
};
zone "abc.net" IN {
type master;
file "/etc/contrail/dns/default-domain-vdns-ns-record.abc.net.zone";
allow-update {127.0.0.1;};
forwarders { };
};
};

Change-Id: I3a573c771d09a247a0627fab3734af7f176f66ff
Closes-Bug:1547236
Closes-Bug:1542516

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.