Zabbix agent passive check validation causes excessive DNS queries for Server= IP values

XMLWordPrintable

    • Type: Problem report
    • Resolution: Unresolved
    • Priority: Trivial
    • None
    • Affects Version/s: None
    • Component/s: Agent (G)
    • None
    • Environment:
      - Zabbix agent running on IBM AIX 7.2
      - passive checks enabled
      - Server= parameter is configured using IP addresses
      - system resolver has DNS search domains configured

      When Zabbix agent validates incoming passive-check connections against the configured Server= IP adresses - it appears to resolve configured peers through getaddrinfo() in the allowed peers validation path.
      In the affected environment Server= is configured with numeric IP addresses only.
      During peer validation agent generates a high number of DNS queries with search domains suffixed to the numeric-looking values. This is unexpected because Zabbix agent seems to use the IP address as a hostname. It seems that the server IPs are used like a shortname of host trying to locate it in the search domain specified.
      Querying DNS has been tracked by tcpdump with the command:

      tcpdump -i en0 dst <name_server_IP> and port 53 -nn -vv -tttt |nl
      

      Steps to reproduce:

      • install Zabbix agent version 6.0.34, 7.0.10, or 7.0.18 on AIX
      • configure passive agent mode Server= using numeric IP addresses only
      • ensure the OS resolver has at lest one DNS search domain configured
      • link the Zabbix default templates for AIX
      • start or restart the Zabbix agent
      • initiate passive checks from a Zabbix server
      • monitor DNS traffic from the agent host

      Result:
      Zabbix agent host generates many DNS queries while validating incoming connections against Server= IP values
      Observed pattern:
      <IP_address>.example.domain

      Expected:
      For IP address entries in Server= - Zabbix agent should not invoke DNS or any other name-resolution service, IP should be handled as numeric address only.

            Assignee:
            Zabbix Support Team
            Reporter:
            Maciej Czernielewski
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: