Error on latest version

Question

Error on latest version

llomgui opened this issue 10 months ago · comments

Hello,

I updated rhel-7 servers today to the latest version:

---> Package google-guest-agent.x86_64 1:20230601.00-g1.el7 will be updated
---> Package google-guest-agent.x86_64 1:20230913.00-g1.el7 will be an update

Since this update, It spams (more than 10 millions in less than 15 minutes) the proxy server with the following calls:
15/Sep/2023:11:30:20 +0200 0 10.10.33.62 TCP_DENIED/403 4013 GET http://169.254.169.254/computeMetadata/v1//? - HIER_NONE/- text/html

Am I missing something? It was working fine before this update.

Thank you

Leandro Dorileo · Answer 1 · Tue Sep 19 2023 01:09:01 GMT+0800 (China Standard Time)

Hi @llomgui

Can you pease try disabling telemetry and seeing if the behavior goes away?

Leandro Dorileo · Answer 2 · Tue Sep 19 2023 02:07:06 GMT+0800 (China Standard Time)

Can you also please share the lines in your squid configuration for allow and deny rules? Can you tell if it's not matching the url http://169.254.169.254/computeMetadata/v1//?, paying special attention to this // part of the path?

Leandro Dorileo · Answer 3 · Tue Sep 19 2023 03:01:22 GMT+0800 (China Standard Time)

Hi @llomgui

Can you pease try disabling telemetry and seeing if the behavior goes away?

Looking back to it I believe this is not related to telemetry.

Guillaume · Answer 4 · Tue Sep 19 2023 18:57:24 GMT+0800 (China Standard Time)

Hello @dorileo,

I found the root cause. It was due to a missconfiguration in the NetworkManager. /etc/resolv.conf file was not generated correctly.

That's why the calls were with 169.254.169.254 ip instead of metadata domain. The NO_PROXY variable was not able to work.