From owner-freebsd-stable@FreeBSD.ORG Sun Dec 25 16:42:01 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F3AD616A41F for ; Sun, 25 Dec 2005 16:42:00 +0000 (GMT) (envelope-from rosti.bsd@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.206]) by mx1.FreeBSD.org (Postfix) with ESMTP id 66ACD43D5E for ; Sun, 25 Dec 2005 16:41:58 +0000 (GMT) (envelope-from rosti.bsd@gmail.com) Received: by zproxy.gmail.com with SMTP id l1so1038775nzf for ; Sun, 25 Dec 2005 08:41:57 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:mime-version:content-type:content-transfer-encoding:content-disposition; b=LEn01NN2VdetnEuNhOde9urPzzMdhhqaK3BQbk2L8ZGawV3DAVaonkAlXbFhcgtX5WnXpHK10WvHmHptaUfSHk8LLOTbZt6zXak5f7aM7ErMYHA/6zqraljK7s2QI8vr45fLS5vmT+ZZTVQcwYh8CPX2hcuKV4rfYN1Z87RI5WU= Received: by 10.65.59.15 with SMTP id m15mr1903531qbk; Sun, 25 Dec 2005 08:41:57 -0800 (PST) Received: by 10.65.211.19 with HTTP; Sun, 25 Dec 2005 08:41:57 -0800 (PST) Message-ID: <59e2ee810512250841t75157e62rec9dc389ac716534@mail.gmail.com> Date: Sun, 25 Dec 2005 18:41:57 +0200 From: Rostislav Krasny To: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Cc: "Michael A. Koerber" , Lowell Gilbert , Marian Hettwer Subject: Re: SSH login takes very long time...sometimes X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Dec 2005 16:42:01 -0000 Hi, I had submitted a bin/62139 PR because of the same problem about a year ago. I still think there is a bug somewhere in a resolver(3) library or in libc functions like gethostbyname(). Because of this bug the gethostbyname() doubles the number of its reverse resolving requests, in a case the DNS server isn't responding. The other reason for very long waiting is a default configuration of resolver(5). In most other systems RES_DFLRETRY is defined as 2, but in FreeBSD it is defined as 4. In a case the DNS server isn't responding the gethostbyname() makes 8 (eight!) reverse resolving attempts for one (!) non-responding DNS server before it returns error. And this is by default. All that is still true for my current 6.0-STABLE. http://www.freebsd.org/cgi/query-pr.cgi?pr=3Dbin/62139 As a workaround I may suggest addind "options attempts:2" or even "options attempts:1" line to the /etc/resolver.conf