This may be a long shot but I have a docker host running on a Debian 11 VM that runs roughly 30 containers. Every morning around 7:30AM I have a huge spike (~7,000) DNS queries from my Docker host VM for *.docker.io domains.
In 1 second my Docker host makes about 7,000 DNS queries to my PiHole instance for those domains which are all answered via cache from my PiHole. I’ve poked around in syslog and messages on my Docker host but I’m not seeing anything standing out. Any suggestions would be greatly appreciated. Thank you.
I think you’re right. I have a container “dockcheck-web” that checks for updates for all of my docker containers. I looked at the logs in dozzle for dockcheck-web and didn’t see anything glaringly obvious. I then did a monitor session on my pihole logs and did a manual update scan from dockcheck-web and it goes bonkers with waaaaay too many dns queries. Thank you! I think I’ll be looking for a different way to monitor my containers for updates moving forward. I appreciate your help!
