IPsec settings fail to apply when a remote gateway is set to an FQDN and there are no DNS servers available
How to reproduce:
1) Disable DNS servers or configure non-existent DNS servers on the System / General Setup page;
2) Configure IPsec PH1 with example.com remote gateway;
3) Press apply.
504 Gateway Time-out error
resolve_retry() - setting `$retries = 10` can improve FQDN resolution time:
# trying to resolve "example.com" when DNS server is no available: # time php -f resolve50retries.php 0.176u 0.047s 0:18.14 1.1% 4588+402k 91+0io 0pf+0w # time php -f resolve10retries.php 0.136u 0.045s 0:03.36 5.0% 3968+364k 51+0io 0pf+0w
Updated by Viktor Gurov about 2 years ago
Updated by Jim Pingle about 2 years ago
- Subject changed from Gateway Timeout error if DNS server is not available and remote gateway = FQDN to IPsec settings fail to apply when a remote gateway is set to an FQDN and there are no DNS servers available
Updating subject for release notes.
Updated by Danilo Zrenjanin about 2 years ago
- Status changed from Feedback to Resolved
Tested on the:
2.6.0-DEVELOPMENT (amd64) built on Sat Sep 11 01:10:13 EDT 2021 FreeBSD 12.2-STABLE
It applies the changes correctly with an FQDN as a remote gateway even without a working DNS setup on the firewall.