I am on Debian Bookworm, SystemD 252.25 (bookworm-proposed-update).
When I type ping <host> I have to wait at least 10 seconds to have a response when the host resolves to an IPv6 address if dnssec is set to yes, output when sending a ping to freedesktop.org:
$ time ping -c1 freedesktop.org
PING freedesktop.org(annarchy.freedesktop.org (2610:10:20:722:a800:ff:feda:470f)) 56 data bytes
64 bytes from annarchy.freedesktop.org (2610:10:20:722:a800:ff:feda:470f): icmp_seq=1 ttl=44 time=143 ms
--- freedesktop.org ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 143.376/143.376/143.376/0.000 ms
real 0m22,106s
user 0m0,002s
sys 0m0,006s
When disabling dnssec:
$ time ping -c1 freedesktop.org
PING freedesktop.org(annarchy.freedesktop.org (2610:10:20:722:a800:ff:feda:470f)) 56 data bytes
64 bytes from annarchy.freedesktop.org (2610:10:20:722:a800:ff:feda:470f): icmp_seq=1 ttl=44 time=144 ms
--- freedesktop.org ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 143.902/143.902/143.902/0.000 ms
real 0m1,741s
user 0m0,001s
sys 0m0,005s
Still longer than sending a ping to a host resolving to an IPv4 address but really better.
First of all, I thought it was because https://github.com/systemd/systemd/pull/31827 was not merged to the 252-stable branch but it is since 252.24 according to the reply I had when opening an issue.
I cannot really test on most recent version of systemd, I prefer avoiding breaking things so I don't know at all how it happens with last version of SystemD.
Are there some fixes pending on the 252-stable branch which could potentially fix this still long delay?
I am lost about how to obtain more diagnostics on systemd resolved and where should I open an issue: on systemd-stable repository on GitHub or on Debian?
Best regards,
--
Patrick ZAJDA
Patrick ZAJDA