- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Windows Client DNS Suffix Search List Configuration
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2019 06:09 AM
More one for awareness than asking how to resolve a particular issue, but our Windows clients/servers have quite a large number of entries in the DNS Suffix Search List.
We are seeing that when applications/users etc are performing a fully qualified DNS request, if they do not properly enter the FQDN with the trailing ".", the client cycles through all the entries in the suffix list before resolving the FQDN.
i.e.
suffix list = acme.com,acme1.com,acme2.com,acme3.com,acme4.com,acme5.com
nslookup www.acme5.com
Resulting queries are as follows:
A quick resolution to this would be to get your Active Directory, desktop/server teams to change the suffix list so that the first entry is "."
i.e.
suffix list = .,acme.com,acme1.com,acme2.com,acme3.com,acme4.com,acme5.com
nslookup www.acme5.com
Resulting queries are as follows:
Expecting to see a massive reduction in DNS queries, NXDOMAIN responses and generally improve perceived client/server behaviour.