From: Alan McKinnon <alan.mckinnon@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] SSH UseDNS without IPv6?
Date: Sat, 09 Feb 2013 21:58:23 +0200 [thread overview]
Message-ID: <5116AA5F.2050509@gmail.com> (raw)
In-Reply-To: <511693EE.1060606@binarywings.net>
On 09/02/2013 20:22, Florian Philipp wrote:
> Hi list!
>
> I have an issue with SSH. It's a variation of the old "Set 'UseDNS no'
> to avoid delays with faulty DNS records" theme.
>
> Following setup:
> 1. I have a server with IPv6 compiled into the SSH daemon but no actual
> IPv6 network interface.
>
> 2. The SSH client has no IPv6, neither compiled nor active.
>
> 3. The DNS server doesn't serve or support AAAA records. Apparently it
> drops all such requests. All other records for IP and reverse lookup are
> correct.
>
> Now I'm experiencing the classic, very long delay when connecting to the
> server via SSH because it does DNS lookups. When I look at wireshark
> dumps, I see correctly served A and reverse lookups but the server also
> insists on doing AAAA requests which time out.
When you say "the server also insists on doing AAAA requests" you mean
the SSH server, right?
>
> I tried limiting the sshd "AddressFamily" to inet (aka IPv4) but this
> didn't change anything. Is there another workaround or do I really have
> to deactivate DNS lookups?
Is the server Gentoo and do you really need IPv6 support on it? Did you
consider rebuilding that host with IPv6 disabled in USE?
IPv6 coexisting with IPv4 is always going to be a tricky problem, and
the recommended defaults you run into all over are usually intended to
force people to hurry IPv6 implementation along :-)
There's always a way to change defaults, and I found this:
http://askubuntu.com/questions/32298/prefer-a-ipv4-dns-lookups-before-aaaaipv6-lookups
The magic file you need to edit appears to be
/etc/gai.conf
--
Alan McKinnon
alan.mckinnon@gmail.com
next prev parent reply other threads:[~2013-02-09 19:59 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-02-09 18:22 [gentoo-user] SSH UseDNS without IPv6? Florian Philipp
2013-02-09 19:58 ` Alan McKinnon [this message]
2013-02-10 11:56 ` Florian Philipp
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5116AA5F.2050509@gmail.com \
--to=alan.mckinnon@gmail.com \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox