dns errors in openshift #13239

Open
opened 2026-03-30 19:15:55 +00:00 by kevin · 3 comments
Owner

Description of request

For a while now, openshift has been sending alerts to openshift cluster admins like:

[FIRING:1] openshift-dns (CoreDNSErrorsHigh platform openshift-monitoring/k8s warning)
description = CoreDNS is returning SERVFAIL for 3.12% of requests. runbook_url = https://github.com/openshift/runbooks/blob/master/alerts/ cluster-dns-operator/CoreDNSErrorsHigh.md

This seems to be caused by mirrormanager querying rackspace hosts and our nameservers erroring with:

Mar 30 19:11:19 ns01.rdu3.fedoraproject.org named[2704]: 30-Mar-2026 19:11:19.945 query-errors: info: client @0x7f5ef7832dc8 10.16.163.123#36492 (hkg.mirror.rackspace.com): view RDU3: query failed (failure) for hkg.mirror.rackspace.com/IN/AAAA at ../../../lib/ns/query.c:7413

But those resolve from outside fine. What could be causing them to fail just on ns01/03 in rdu3 view?

### Description of request For a while now, openshift has been sending alerts to openshift cluster admins like: [FIRING:1] openshift-dns (CoreDNSErrorsHigh platform openshift-monitoring/k8s warning) description = CoreDNS is returning SERVFAIL for 3.12% of requests. runbook_url = https://github.com/openshift/runbooks/blob/master/alerts/ cluster-dns-operator/CoreDNSErrorsHigh.md This seems to be caused by mirrormanager querying rackspace hosts and our nameservers erroring with: ``` Mar 30 19:11:19 ns01.rdu3.fedoraproject.org named[2704]: 30-Mar-2026 19:11:19.945 query-errors: info: client @0x7f5ef7832dc8 10.16.163.123#36492 (hkg.mirror.rackspace.com): view RDU3: query failed (failure) for hkg.mirror.rackspace.com/IN/AAAA at ../../../lib/ns/query.c:7413 ``` But those resolve from outside fine. What could be causing them to fail just on ns01/03 in rdu3 view?
Owner

Is there some difference between the nameservers that are hitting this issue and those that don't? Or is this happening for all the nameservers?

Is there some difference between the nameservers that are hitting this issue and those that don't? Or is this happening for all the nameservers?
Author
Owner

This only seems to be happening in rdu3 (using ns01/ns03 nameservers)

It's always the AAAA record that has problems and always these rackspace mirrors.

This only seems to be happening in rdu3 (using ns01/ns03 nameservers) It's always the AAAA record that has problems and always these rackspace mirrors.
Author
Owner
I filed https://redhat.atlassian.net/browse/RHEL-188768 on this
Sign in to join this conversation.
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
infra/tickets#13239
No description provided.