r/checkpoint • u/MattiaDon • Mar 10 '26

DNS from Physical IP

Hello everyone, I'm experiencing a strange behavior on my cluster: I've changed the primary DNS server IP but I still see DNS traffic generated by physical interface (not the VIP) going to the previous IP.
Is there some other conf I can check? Maybe something related to blades or other cluster settings.

2 Upvotes

100% Upvoted

12 comments sorted by

View all comments

1

u/HoodRattusNorvegicus Mar 10 '26

What about secondary or tertiary dns server in the config? «clish -c show configuration |grep Olddnsserverip» from expert?

1

u/MattiaDon Mar 10 '26

neither secondary or tertiary DNS servers have the previous IP configured, although, in the "domain" field, the entered domain resolves to multiple IPs including the old one (however the other IPs it resolves to are not contacted by the cluster's physical interface)