Can not "ping" "vault.service.consul" entrypoint

[Sergey Esin]

Hi,

I have strange problems and still unable to find the answer, please help.

I have 5 node cluster of Vault with Consul as a backend.

If I try to ping entrypoint "vault.service.spb.consul" but keep getting:

$ ping vault.service.spb.consul

ping: unknown host vault.service.spb.consul

.. but "nslookup" and "host" commands work:

$ nslookup vault.service.spb.consul

Server:         172.20.200.17

Address:        172.20.200.17#53

Non-authoritative answer:

vault.service.spb.consul        canonical name = consul-srv-3.labs.domain.com.

vault.service.spb.consul        canonical name = consul-srv-1.labs.domain.com.

vault.service.spb.consul        canonical name = consul-srv-2.labs.domain.com.

Name:   consul-srv-3.labs.domain.com

Address: 172.20.202.144

$ host vault.service.spb.consul

vault.service.spb.consul is an alias for consul-srv-3.labs.domain.com.

vault.service.spb.consul is an alias for consul-srv-1.labs.domain.com.

vault.service.spb.consul is an alias for consul-srv-5.labs.domain.com.

consul-srv-3.labs.domain.com has address 172.20.202.144

I am running the latest available versions: Vault 0.6.2 and Consul 0.7.1.

And have zero issues with "active.vault.service.spb.consul" entrypoint - "ping", "nslookup" and "host" commands work just fine:

$ nslookup active.vault.service.spb.consul

Server:         172.20.200.17

Address:        172.20.200.17#53

Non-authoritative answer:

active.vault.service.spb.consul canonical name = consul-srv-4.labs.domain.com.

Name:   consul-srv-4.labs.domain.com

Address: 172.20.202.207

$ host active.vault.service.spb.consul

active.vault.service.spb.consul is an alias for consul-srv-4.labs.domain.com.

consul-srv-4.labs.domain.com has address 172.20.202.207

$ ping active.vault.service.spb.consul

PING consul-srv-4.labs.domain.com (172.20.202.207) 56(84) bytes of data.

64 bytes from consul-srv-4.labs.domain.com (172.20.202.207): icmp_seq=1 ttl=63 time=0.320 ms

64 bytes from consul-srv-4.labs.domain.com (172.20.202.207): icmp_seq=2 ttl=63 time=0.315 ms

64 bytes from consul-srv-4.labs.domain.com (172.20.202.207): icmp_seq=3 ttl=63 time=0.347 ms

64 bytes from consul-srv-4.labs.domain.com (172.20.202.207): icmp_seq=4 ttl=63 time=0.325 ms

^C

--- consul-srv-4.labs.domain.com ping statistics ---

4 packets transmitted, 4 received, 0% packet loss, time 3002ms

rtt min/avg/max/mdev = 0.315/0.326/0.347/0.025 ms

DNS server 172.20.200.17 is powered by Microsoft DNS.

I've tried to strace "ping" command, checked DNS setup but can not find anything wrong at DNS side.

What am I missing?

[James Phillips]

Hi - I think this is the same as
https://groups.google.com/d/msg/consul-tool/IUp5LvUrGDA/6WnY5_6kDAAJ.
We will work this up on that thread.

> --
> This mailing list is governed under the HashiCorp Community Guidelines -
> https://www.hashicorp.com/community-guidelines.html. Behavior in violation
> of those guidelines may result in your removal from this mailing list.
>
> GitHub Issues: https://github.com/hashicorp/consul/issues
> IRC: #consul on Freenode
> ---
> You received this message because you are subscribed to the Google Groups
> "Consul" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to consul-tool...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/consul-tool/b61b3ffe-0940-436b-9c50-3e01dc72e744%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.