> I am suspicious that you might be having Path-MTU discovery issues,
> these can affect DNS UDP queries as well as TCP connections. Is ICMP
> working fully along all networks between you and those resolvers?
Here are the outputs of 'tracepath' and ICMP ping:
# tracepath 8.8.8.8/53
1: 10.1.1.2 0.092ms pmtu 1500
1: 10.1.1.1 1.002ms
1: 10.1.1.1 0.973ms
2: 10.1.1.1 1.064ms pmtu 1492
2: 182.176.0.50 37.750ms asymm 3
3: 10.1.1.6 56.369ms asymm 7
4: 203.99.170.145 54.781ms asymm 7
5: static-10GE-KHI275-PO1-PE01.pie.net.pk 57.415ms asymm 7
6: static-khi-ni01-swa.pie.net.pk 56.386ms asymm 5
7: no reply
8: no reply
9: no reply
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
25: no reply
26: no reply
27: no reply
28: no reply
29: no reply
30: no reply
31: no reply
Too many hops: pmtu 1492
Resume: pmtu 1492
root@vyatta:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_req=1 ttl=48 time=168 ms
64 bytes from 8.8.8.8: icmp_req=2 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=3 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=4 ttl=48 time=178 ms
64 bytes from 8.8.8.8: icmp_req=5 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=6 ttl=48 time=170 ms
64 bytes from 8.8.8.8: icmp_req=7 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=8 ttl=48 time=170 ms
64 bytes from 8.8.8.8: icmp_req=9 ttl=48 time=170 ms
64 bytes from 8.8.8.8: icmp_req=10 ttl=48 time=168 ms
64 bytes from 8.8.8.8: icmp_req=11 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=12 ttl=48 time=169 ms
64 bytes from 8.8.8.8: icmp_req=13 ttl=48 time=168 ms
^C
--- 8.8.8.8 ping statistics ---
13 packets transmitted, 13 received, 0% packet loss, time 12002ms
rtt min/avg/max/mdev = 168.271/170.123/178.001/2.408 ms
On the other side clients are receiving DNS Timeouts in browser on every
site except https sites.
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/DNS-Returned-Timeout-Issue-tp4658603p4658741.html
Sent from the Squid - Users mailing list archive at Nabble.com.
