Hot answers tagged

5 votes
Accepted

Blue/green deployment with micro services and DNS

You should have 3 names when you're willing to do a blue/green deployment. Two set of names, one for blue, one for green, which will works as is, and a production entrypoint which will point to ...
user avatar
  • 11.1k
5 votes

Kubernetes on k3s can't resolve domains from custom dns server (fritz.box with dnsmasq)

ibuildthecloud9 gave me the right hint. Since the github issue doesn't describe how to midify the dns, I figured it out and want to document it here in case someone need to change it, too. It's stored ...
user avatar
  • 191
4 votes

Kubernetes on k3s can't resolve domains from custom dns server (fritz.box with dnsmasq)

I believe this is an current bug in k3s that upstream DNS is hardcoded to 1.1.1.1. this should be resolved shortly https://github.com/rancher/k3s/issues/53
user avatar
3 votes

Trick a docker containers DNS to resolve a different url

If you want a DNS lookup of one domain to resolve to another one, you have 2 options. Modify the Container /etc/hosts file. By default any DNS lookup is done there. You schould do that in the ...
user avatar
  • 604
3 votes
Accepted

What are the advantages of using AWS nameservers as opposed to servers provided by other registrars?

There are two parts to owning a domain. The registration, and the hosting of the DNS entries. As you are transferring the domain registration, AWS needs to know whose service do you want to use for ...
user avatar
3 votes
Accepted

Can't hit redis using DNS name in multi-container pod on Kubernetes

You're using two different host names: $ rdcli -h dbbackupd.default.cluster.local $ host dbbackupd.default.svc.cluster.local The one used with rdcli is missing .svc.
user avatar
  • 556
2 votes

Debug Docker DNS

There is a comprehensive document about k8s' DNS. According to this document one could validate whether the DNS is working by running: busybox.yaml apiVersion: v1 kind: Pod metadata: name: busybox ...
user avatar
  • 12.6k
2 votes

Are Route 53 DNS records aliasing ELBs guaranteed for their lifetime?

If you’re talking about using a Route 53 ALIAS record, you cannot set the TTL on it, for this reason. It defaults to a low value, and is managed by AWS for you (to the world it appears as an A record, ...
user avatar
  • 1,055
2 votes
Accepted

Does Kubernetes internal networking keep traffic to co-located Pods where possible?

No, Kubernetes will load-balance requests to a ClusterIP across all Pods with matching labels (and passing readiness checks). It won't keep traffic within the same Node. Q: So how does the NodeLocal ...
user avatar
  • 141
2 votes

Does Kubernetes internal networking keep traffic to co-located Pods where possible?

This looks to be answered on offcail docs here NodeLocal DNSCache improves Cluster DNS performance by running a dns caching agent on cluster nodes as a DaemonSet. With this architecture, Pods will ...
user avatar
  • 250
2 votes
Accepted

Using Amazon VPC provided DNS trough AWS Site-to-Site VPN

Is it possible to query Amazon DNS server from our corporate network trough the VPN tunnel? Directly? No. The recursive resolver available by default when you create a VPC can only be accessed by an ...
user avatar
  • 1,345
2 votes

How to access a fully qualified domain name through "localhost"?

According to your screen dump you have your port 80 mapped to the Traefik container 58cd5b59579c traefik:v2.2 "/entrypoint.sh --lo…" 16 minutes ago Up 15 ...
user avatar
2 votes

How can you map DNS/host names to their IPs at scale?

There may be other ways to achieve this. But the most elegant way we found was using python's socket library. You can get all the info in a one liner, and extract it into a list in another line. It'...
user avatar
1 vote

Trick a docker containers DNS to resolve a different url

The extra_hosts setting in docker-compose might help you. Docs
user avatar
1 vote

How to locally resolve host name starting with variable slug?

People often use dnsmasq for this. You can wildcard sub-domains like this fairly easily for local testing using it. Here's an example - https://qiita.com/bmj0114/items/9c24d863bcab1a634503 but there ...
user avatar
1 vote

Why does running echo with exec form in a Dockerfile create /etc/resolv.conf?

The /etc/resolv.conf is injected as a bind mount in containers by the docker engine with settings local to that docker engine. An empty file in the parent filesystem is an artifact of that bind mount. ...
user avatar
  • 2,800
1 vote
Accepted

Accessing External REST api From Wthin Kubernetes Cluster

Usually to access an external API you can just use its URL. But you can create a Service for it if you like, the type of service should be ExternalName as described in the documentation https://...
user avatar
1 vote

Accessing External REST api From Wthin Kubernetes Cluster

A service in kubernetes is (mostly) used for internal communication. If you want to access an external resource by domain/ip you can just do so. If you have an IP address and you would like to have ...
user avatar
1 vote

DNS hosting choices - how to programmatically update DNS settings

You can use dns.resolver or dns.rdatatype and update in Python like below: import dns.resolver import dns.rdatatype import dns.update for i in dns.resolver.query('blah.com', 'TXT').answer.response: ...
user avatar
  • 31
1 vote

DNS hosting choices - how to programmatically update DNS settings

Amazon web services provides such a service, called Route53. You can actually use REST calls, but it is much easier to use their command line tools or bindings for PHP, Python or JavaScript. Here ...
user avatar
  • 650
1 vote

Where do I set that agent certificate for Puppet on Amazon Linux?

On the agent I needed to set the server ip set to puppet in /etc/hosts I had accidentally put it on the agents ip address and then been incorrectly assuming i'd done something wrong on the master ...
user avatar
  • 463
1 vote

service-to-pod communication is broken in kubernetes

Sounds like the problem has been resolved by deleting all of the kube-proxy pods, which is an aggressive solution but if it works then good work! Best I can offer you is a collection of links about ...
user avatar
1 vote

Route53 DNS records stopped resolving

When I lookup your domain thuijls.net on MXToolBox I get the following messageL Dns record not found They explain this to mean: More Information About Dns Record Published We did not find a SPF ...
user avatar
1 vote
Accepted

Sub-subdomain Domain name for different environment

Both are completely correct. It can differ organisation by organisation. Also, once you start using one of the domain namespace type, you will gradually remember the format and no issues will come. ...
user avatar
  • 951
1 vote
Accepted

docker build throws UnknownHostException with jenkins dind slave + kubernetes plugin

Found the answer here Just add --network=host to docker build or docker run. docker build --network=host foo/bar:latest .
user avatar
1 vote

Route53 Routing Policies - Best Policy for US-based Ecommerce?

To answer your question, ill first try to give simple explanations for each policy to help with the confusion (https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html). Simple: ...
user avatar
1 vote

Cloudfront for ELB, automatic redirection

I needed to whitelist Host, Origin and Referer in the Whitelist Headers section. I've had more issues with CloudFront, wrote a blog post about it, maybe someone will find it helpful: https://medium....
user avatar
1 vote

Cloudfront for ELB, automatic redirection

As the issue is happening only with /admin URL, this might be related with cookies which are being passed to the backend application's /admin URL. You may need to check with CraftCMS team (or some ...
user avatar
  • 951
1 vote
Accepted

Docker Containers fails to DNS resolve on subnet 10.0.2.0/24

We have not been able to figure out what the problem is or what a solution could be. The workaround is actually not using the 10.0.2.0 subnet, so I will add that as an answer as requested in the ...
user avatar
  • 629
1 vote

Issue with custom domain SSL certification

Can you obtain a secure certificate for someone else's domain or subdomain without their help - hopefully not. One of the core security pillars of a secure certificate is that it ensures that you are ...
user avatar
  • 650

Only top scored, non community-wiki answers of a minimum length are eligible