DNS High Latency issue on 7.4.0

[imuscleupcarat]

Hi All,

Just want a quick help on our issue with High DNS Issue.

I have seen this article below.

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/126629

And I am just wondering would it be service affecting if you would run commands like the following:

diagnose test application dnsproxy

1. Clear DNS cache

2. Dump DNS Setting

3. Reload FQDN

4. DNS debug bit mask

5. DNS debug obj mem

6. Restart dnsproxy worker

ETC.

REGARDS

NICKO

@All 

[AEK]

Hello

As per my experience this latency value is not to take in consideration as long as your DNS server responds to queries in time.

[hbac]

Hi @imuscleupcarat,

Are those DNS servers in the same subnet as FortiGate? Which protocol are you using? Please provide the output of this command "show full system dns" if possible.

Regards, 

[imuscleupcarat]

Hi They are using UDP port 53,

Can you confirm if the commands on my post are service affecting when run?

[mle2802]

Hi @imuscleupcarat,

Please refer to this document for more detail https://community.fortinet.com/t5/FortiGate/Technical-Note-FortiGate-Troubleshooting-DNS-commands/ta....

[mle2802]

Also, for this high latency, what is the protocol you are using and have you tried different DNS server?

[imuscleupcarat]

They are using UDP port 53

[imuscleupcarat]

Yes I have seen this article already and none of it states if it will be service impacting when running those commands. that is what i want to confirm

[johnlloyd_13]

hi,

where are your DNS hosted? is it within or outside your country/region?

did you encounter this issue prior to 7.4?