On 21 Jun 2017 4:30 pm, "chrisohaver" ***@***.***> wrote: *Problem*: A known issue with kube-dns and how K8s works is the long DNS search path and high ”ndots” in /etc/resolv.conf. kubernetes/kubernetes#33554 <kubernetes/kubernetes#33554> For example, search path in a pod as dictated by the pod's dns policy is: namespace.svc.cluster.local svc.cluster.local cluster.localmydomain.com If you try to lookup ”google.com” you will end up with queries: google.com.namespace.svc.cluster.local. google.com.svc.cluster.local. google.com.cluster.local.google.com.mydomain.com.google.com. This means that for every query of a host outside the cluster, the client has to make 5 queries. *Proposed Solution*: For queries from pods in the cluster, iterate on the search path in coredns, returning the first successful lookup back to the client. This allows the client to get the answer in one query, instead of five. The condition for doing the preemptive lookups on an incoming question would have to meet all of the following... - the incoming question would otherwise result in an NXDOMAIN (e.g. it doesn't match a service) - the source is a pod in the kubernetes cluster - the question ends with namespace.svc.cluster.local. where namespace is the namespace of the pod, and cluster.local is the zone If these conditions are met, then the kubernetes middleware would strip the search path from the question, and try the remaining search paths until an answer is found. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#747>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAVkW3G3OOEv3wKRhNePFLiPO-eTFeMjks5sGTcggaJpZM4OBI1H> .

On 21 Jun 2017 8:50 pm, "John Belamaric" ***@***.***> wrote: Or are you saying so that it can be used in non-k8s cases? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#747 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAVkW1SQCR7m2VIGDUXfcRA-g2pGT6yJks5sGXQIgaJpZM4OBI1H> .