Foreman » Smart Proxy

OS TheForeman: CentOS 7.9.2009
OS DNS Server: RHEL 7.9
Bind Version: 9.11.4.26.P2
Foreman Version: 3.0.1

We experience following issue after updating the additional packages for foreman-smart-proxy from repository version 2.5 and higher.

This warning message is after provisioning a new server on following steps:

• Create IPv4 DNS record for servername1.domain.local
  

  2021-12-22T11:47:35 48d893f0 [I] Started POST /dns/ 
  2021-12-22T11:48:01 48d893f0 [W] Slow DNS query getresources for ["servername1.domain.local", Resolv::DNS::Resource::IN::A] took 26021.57 ms
  2021-12-22T11:48:01 48d893f0 [D] Resolver used: #<Resolv::DNS:0x00007faf241e3798 @mutex=#<Thread::Mutex:0x00007faf241e3770>, @config=#<Resolv::DNS::Config:0x00007faf241e3748 @mutex=#<Thread::Mutex:0x00007faf241e3720>, @config_info={:nameserver=>"127.0.0.1"}, @initialized=true, @timeouts=[5, 8, 13], @nameserver_port=[["127.0.0.1", 53]], @search=[[]], @ndots=1>, @initialized=true>
  2021-12-22T11:48:01 48d893f0 [D] running /usr/bin/nsupdate -k /etc/foreman-proxy/foreman_dns.key 
  2021-12-22T11:48:01 48d893f0 [D] nsupdate: executed - server 127.0.0.1
  2021-12-22T11:48:01 48d893f0 [D] nsupdate: executed - update add servername1.domain.local. 60 A 10.40.15.118
  2021-12-22T11:48:01 48d893f0 [I] Finished POST /dns/ with 200 (26053.1 ms)
  

• Create Reverse IPv4 DNS record for servername1.domain.local
  

  2021-12-22T11:48:01 48d893f0 [I] Started POST /dns/ 
  2021-12-22T11:48:27 48d893f0 [W] Slow DNS query getresources for ["118.15.40.10.in-addr.arpa", Resolv::DNS::Resource::IN::PTR] took 26027.94 ms
  2021-12-22T11:48:27 48d893f0 [D] Resolver used: #<Resolv::DNS:0x00007faf2423dfb8 @mutex=#<Thread::Mutex:0x00007faf2423df90>, @config=#<Resolv::DNS::Config:0x00007faf2423df68 @mutex=#<Thread::Mutex:0x00007faf2423df40>, @config_info={:nameserver=>"127.0.0.1"}, @initialized=true, @timeouts=[5, 8, 13], @nameserver_port=[["127.0.0.1", 53]], @search=[[]], @ndots=1>, @initialized=true>
  2021-12-22T11:48:27 48d893f0 [D] running /usr/bin/nsupdate -k /etc/foreman-proxy/foreman_dns.key 
  2021-12-22T11:48:27 48d893f0 [D] nsupdate: executed - server 127.0.0.1
  2021-12-22T11:48:27 48d893f0 [D] nsupdate: executed - update add 118.15.40.10.in-addr.arpa. 60 PTR servername1.domain.local
  2021-12-22T11:48:27 48d893f0 [I] Finished POST /dns/ with 200 (26054.26 ms)
  

This issue exist, when using the Smart Proxy Modul "DNS for nsupdate" after Upgrading the Smart Proxy above Version 2.5.

We tried various versions to get this issue fixed, but it is not related to the foreman-proxy package, it is caused after upgrading the package tfm-runtime

Every Foreman SmartProxy Version work (2.5 - 3.0) until you upgrade the tfm-runtime package to version "tfm-runtime-7.0-4.el7.x86_64".

You can reproduce this behavior with downgrading back to "tfm-runtime-6.1-4.el7.x86_64" (working) or upgrade to "tfm-runtime-7.0-4.el7.x86_64" (not working or slow dns queries).

Someone else reported this behavior already on community forum: https://community.theforeman.org/t/foreman-domains-dns-proxy-slow/22558/3