The DNS machineBuilding or Manual Create DNS Entries workflow in the DNS module will time out after a DNS entry has been created properly. That scenario is easily remedied by setting and / or increasing the SovLabs_preDnsValidationSleepSeconds property. In some instances, a customer might note that from the command line of the vRO appliance that an nslookup will show the forward and reverse DNS entry as resolving but the workflow may be timing out saying the host is not resolvable.
A negative cache of the failed lookup can cause the JVM to believe that the newly provisioned VM is not there when it is and should be resolvable.
2018.3.5 and above (likely previous versions too; unverified)
Workaround or Solution
The solution is to disable caching in name resolution in the JVM.
Disable it for the entire JVM
- Log into your vRO server via console or SSH
- Run the following command to confirm your current settings
- cat java.security | grep networkaddress.cache*
- By default, the cache settings for JVM on vRO is set as follows:
Setting name Value #networkaddress.cache.ttl -1 networkaddress.cache.negative.ttl 10
- Amend the default cache settings to the following:
Setting name Value networkaddress.cache.ttl 0 networkaddress.cache.negative.ttl 0
- Restart your vco-server
NOTE: A setting of -1 means cache forever, a setting of 1 → <number> means it will cache for that amount of time in minutes. A setting of 0 means it will never cache.
Also be aware that future updates to your vRO environment may change these settings back to their defaults.
Disable it for just the vco-server application
- Since these options are security options passing them as an argument via the -D option is a bit different. I believe (but haven't confirmed) that adding -Dsun.net.inetaddr.negative.ttl=0 -Dsun.net.inetaddr.ttl=0 as JVM arguments defined in usr/lib/vco/app-server/bin/setenv.sh and then bouncing vco-server should do it.
Set Pre DNS Validation sleep seconds
Set the number of seconds to pause before validating DNS entries. This helps if negative caching is causing problems with DNS resoultion.
- Login to the vRA tenant
- Click on the Design tab > Blueprints
- Hover over the desired blueprint name and click Edit
- Click on the vSphere machine component on the Blueprint Design Canvas
- Click on the Properties tab
- In the Custom Properties section:
- Click on the New Property button
- Name field: Type in
- Value field: Type the number of seconds to sleep
- Click on the button
- Click OK
Repeat Step 3 for all desired blueprints
This information has been taken from: http://docs.sovlabs.com/latest/vRA/7.5/modules/dns/infoblox-dns/usage/#set-pre-dns-validation-sleep-seconds
Amend your infrastructure DNS Negative cache settings
Most organisations run Microsoft DNS infrastructure. The default values for a Microsoft DNS server are as follows (running powershell command: Get-DnsServerCache)
|Name||Number||Unit of Time|
More information on DNS Negative cache from Microsoft:
Change DNS replication intervals
Changing MaxNegativeTTL for your DNS
Discovered in ticket 1162