As of last night, shortly after turning off some 1:1 NATting and setting up some new forwards to make up for it, my DNS resolution took a dump.
for example:
computer:~ u3b3rg33k$ dig untangle.com
; <<>> DiG 9.6-ESV-R4-P3 <<>> untangle.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3425
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4
;; QUESTION SECTION:
;untangle.com. IN A
;; ANSWER SECTION:
untangle.com. 300 IN A 74.123.28.23
;; AUTHORITY SECTION:
untangle.com. 172783 IN NS dns2.untangle.com.
untangle.com. 172783 IN NS dns.untangle.com.
;; ADDITIONAL SECTION:
dns.untangle.com. 172783 IN A 74.123.28.4
dns.untangle.com. 172783 IN AAAA 2607:f3a0:13::250:56ff:fe96:4b6
dns2.untangle.com. 172783 IN A 74.123.29.4
dns2.untangle.com. 172783 IN AAAA 2001:470:810d:21:230:48ff:fe86:9b29
;; Query time: 4213 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sat Jan 25 17:54:19 2014
;; MSG SIZE rcvd: 171
if I set the DNS server locally, this happens (different name chosen to avoid cached IP lookup)
computer:~ u3b3rg33k$ dig forums.untangle.com
; <<>> DiG 9.6-ESV-R4-P3 <<>> forums.untangle.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6142
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;forums.untangle.com. IN A
;; ANSWER SECTION:
forums.untangle.com. 300 IN A 74.123.28.16
;; Query time: 87 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan 25 18:00:40 2014
;; MSG SIZE rcvd: 53
computer:~ u3b3rg33k$
I'm at a bit of a loss. just for kicks, I rebooted the untangle box, and of course, it made no difference. (FWIW, it's a newish xeon with ECC ram). There are no other performance issues, but I can't figure out what's going on here. 4 seconds is completely ridiculous.
Everything (including untangle) is currently using google's 8.8.8.8 and 8.8.4.4, after switching from my ISP's DNS servers to see if that was the problem. No change.
I can work around this for servers and workstations, but manually setting computers that move (laptops) can cause other problems.