systemd-resolved fails to resolve queries after a few minutes with DNSOverTLS #38509
Description
systemd version the issue has been seen with
systemd 257.8-1
Used distribution
Arch Linux
Linux kernel version used
6.16.0-arch1-1
CPU architectures issue was seen on
x86_64
Component
resolvectl, systemd-resolved
Expected behaviour you didn't see
systemd-resolved resolves queries continously
Unexpected behaviour you saw
systemd-resolved fails to resolve queries after ~20 minutes
Steps to reproduce the problem
- Enable DoT
- Wait for approximately 20 minutes
- Connect to some site
Additional program output to the terminal or log subsystem illustrating the issue
aug 06 22:07:57 mate systemd-resolved[14498]: varlink-28-28: Sending message: {"error":"io.systemd.Resolve.MaxAttemptsReached","parameters":{}}
aug 06 22:07:57 mate systemd-resolved[14498]: Freeing transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Freeing transaction 38827.
aug 06 22:07:57 mate systemd-resolved[14498]: Freeing transaction 4573.
aug 06 22:07:57 mate systemd-resolved[14498]: Freeing transaction 32544.
aug 06 22:07:57 mate systemd-resolved[14498]: Regular transaction 49372 for <www.archlinux.org IN A> on scope dns on enp3s0/* now complete with <attempts-max-reached> from none (unsigned; non-confidential).
aug 06 22:07:57 mate systemd-resolved[14498]: enp3s0: Switching to DNS server 192.168.1.1.
aug 06 22:07:57 mate systemd-resolved[14498]: Announcing packet size 1452 in egress EDNS(0) packet.
aug 06 22:07:57 mate systemd-resolved[14498]: Using feature level TLS+EDNS0 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Sending query via TCP since UDP isn't supported or DNS-over-TLS is selected.
aug 06 22:07:57 mate systemd-resolved[14498]: Using DNS server 2001:4c4e:13d4:5700::1 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Using feature level TLS+EDNS0 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Firing regular transaction 49372 for <www.archlinux.org IN A> scope dns on enp3s0/* (validate=yes).
aug 06 22:07:57 mate systemd-resolved[14498]: Cache miss for www.archlinux.org IN A
aug 06 22:07:57 mate systemd-resolved[14498]: enp3s0: Switching to DNS server 2001:4c4e:13d4:5700::1.
aug 06 22:07:57 mate systemd-resolved[14498]: Announcing packet size 1472 in egress EDNS(0) packet.
aug 06 22:07:57 mate systemd-resolved[14498]: Using feature level TLS+EDNS0 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Sending query via TCP since UDP isn't supported or DNS-over-TLS is selected.
aug 06 22:07:57 mate systemd-resolved[14498]: Using DNS server 192.168.1.1 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Using feature level TLS+EDNS0 for transaction 49372.
aug 06 22:07:57 mate systemd-resolved[14498]: Firing regular transaction 49372 for <www.archlinux.org IN A> scope dns on enp3s0/* (validate=yes).
and this repeats many times