Skip to content

Conversation

@cbaugus
Copy link
Owner

@cbaugus cbaugus commented Dec 16, 2025

This commit adds the DNS_CACHE_ENABLED environment variable to control DNS caching behavior during load tests. By default (false), DNS caching is disabled to ensure immediate detection of backend DNS changes.

Changes:

  • Add DNS_CACHE_ENABLED configuration (default: false)
  • When disabled, connection pooling is turned off to force DNS lookups on each request (pool_max_idle_per_host=0, pool_idle_timeout=0)
  • When enabled, normal connection pooling and DNS caching apply
  • Add startup logging to show DNS cache status
  • Document DNS_CACHE_ENABLED in README with usage examples
  • Add detailed "DNS Caching Behavior" section explaining trade-offs

This feature is critical for testing:

  • Blue/green deployments with DNS switchovers
  • Failover scenarios with DNS redirection
  • Any situation where backend IPs change during a test

Trade-offs:

  • Disabled (default): Higher DNS load, TCP overhead, but immediate DNS change detection
  • Enabled: Better performance, but may miss DNS changes during test

Resolves #12

🤖 Generated with Claude Code

cbaugus and others added 2 commits December 16, 2025 12:01
This commit adds the DNS_CACHE_ENABLED environment variable to control
DNS caching behavior during load tests. By default (false), DNS caching
is disabled to ensure immediate detection of backend DNS changes.

Changes:
- Add DNS_CACHE_ENABLED configuration (default: false)
- When disabled, connection pooling is turned off to force DNS lookups
  on each request (pool_max_idle_per_host=0, pool_idle_timeout=0)
- When enabled, normal connection pooling and DNS caching apply
- Add startup logging to show DNS cache status
- Document DNS_CACHE_ENABLED in README with usage examples
- Add detailed "DNS Caching Behavior" section explaining trade-offs

This feature is critical for testing:
- Blue/green deployments with DNS switchovers
- Failover scenarios with DNS redirection
- Any situation where backend IPs change during a test

Trade-offs:
- Disabled (default): Higher DNS load, TCP overhead, but immediate
  DNS change detection
- Enabled: Better performance, but may miss DNS changes during test

Resolves #12

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit adds 'apt-get upgrade -y' to the runtime image build
process to ensure all Ubuntu base packages are updated to their
latest patched versions.

Fixes the following CVEs:
- CVE-2024-41996 (openssl) - N/A severity
- CVE-2025-45582 (tar) - N/A severity
- CVE-2025-8941 (pam) - N/A severity
- CVE-2024-56433 (shadow) - N/A severity
- CVE-2024-2236 (libgcrypt20) - N/A severity
- CVE-2022-3219 (gnupg2) - 3.3 severity

Note: CVE-2016-2781 (coreutils, 6.5 severity) from 2016 is marked
as "won't fix" by Ubuntu and has low exploitability in container
contexts.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Guide: Using Short DNS TTLs for Dynamic Backend DNS Changes During Load Tests

2 participants