DNS name server shows DOWN on NetScaler as shown in the following output:
show dns nameserver
1) 192.193.215.69 - State: DOWN Protocol: UDP
2) 192.193.215.73 - State: DOWN Protocol: UDP
3) 192.193.215.65 - State: DOWN Protocol: UDP
To resolve this issue, create a DNS service on NetScaler with an increased response timeout custom monitor (in this example 10 seconds) and bind it to the DNS service.
> sh monitor test-icmp
1) Name.......: test-icmp Type......: PING State....: ENABLED
Standard parameters:
Interval.........: 11 sec
Retries...........: 3
Response timeout.: 10 sec Down time.........: 30 sec
Reverse..........: NO
Transparent.......: NO
Secure...........: Not applicable
LRTM..............: ENABLED
Action...........: Not applicable
Deviation.........: 0 sec
Destination IP...: Bound service
Destination port.: Not applicable
Iptunnel.........: NO
TOS..............: NO
TOS ID............: 0
SNMP Alert Retries: 0
Success Retries..: 1
Failure Retries..: 0
Done
DNS-Service State:
MPX-7500> sh service dns-test
dns-test (X.X.X.X:53) - DNS
State: UP
Last state change was at Sat Dec 6 07:50:54 2014
Time since last state change: 0 days, 00:13:17.270
Server Name: 192.193.215.69
Server ID : None Monitor Threshold : 0
Max Conn: 0 Max Req: 0 Max Bandwidth: 0 kbits
Use Source IP: NO
Client Keepalive(CKA): NO
Access Down Service: NO
TCP Buffering(TCPB): NO
HTTP Compression(CMP): NO
Idle timeout: Client: 120 sec Server: 120 sec
Client IP: DISABLED
Cacheable: NO
SC: OFF
SP: OFF
Down state flush: ENABLED
Appflow logging: ENABLED
1) Monitor Name: test-icmp
State: UP Weight: 1
Probes: 73 Failed [Total: 0 Current: 0]
Last response: Success - ICMP echo reply received.
Response Time: 6272.58 millisec
Done
From the NetScaler trace files we see a latency of more than 6 seconds for the monitor probe packets sent out by NetScaler to DNS servers which are ICMP packets.
There is a timeout of 2 seconds on the monitor probe packets sent out of NetScaler.
show monitor ping-default
1) Name.......: ping-default Type......: PING State....: ENABLED
Standard parameters:
Interval.........: 5 sec Retries...........: 2
Response timeout.: 2 sec Down time.........: 30 sec
Reverse..........: NO Transparent.......: NO
Secure...........: Not applicable LRTM..............: ENABLED
Action...........: Not applicable Deviation.........: 0 sec
Destination IP...: Bound service
Destination port.: Not applicable
Iptunnel.........: NO
TOS..............: NO
SNMP Alert Retries: 0 Success Retries..: 1
Failure Retries..: 0
Since the monitor probe response does not reach NetScaler within 2 secs, NetScaler is marking the DNS servers as DOWN.