On Tue, 2024-10-29 at 16:30 +0000, Daniel Westermann (DWE) wrote:
Delays between "connection received" and "connection authenticated" because of localhost entries in hba
Maybe check that "files" is the first mechanism for hosts lookups in nsswitch.conf.
afaik dig doesn't follow the same name resolution path as glibc.
a connection received should mean resolution was done, right ? am i missing something?
I could try adding delay with traffic control, but then if a connection established is logged in the log, then name resolution is ok ?
or the syscall to md5 is slow , does it work faster for trust ? just saying :)
--