SSH login takes very long time...sometimes

[Rostislav Krasny]

Chuck Swiger <cswiger at mac.com> wrote:
> Yar Tikhiy wrote:
> [ ... ]
> > A similar effect was observed when a `domain' line was specified
> > in resolv.conf in place of `search'.
> >
> > Is there a real reason to retry with a different domain when the
> > nameserver doesn't respond at all?
>
> UDP is lossy, and it may take a nameserver longer to respond that the client
> resolver library is willing to wait; the fact that a nameserver didn't answer
> once isn't a sure sign that it won't answer other questions, or even that it
> won't answer the same question if you just wait a minute.

Trying different domains isn't intended for fighting against UDP
packets loss. To fight against UDP packets loss you have RES_DFLRETRY
or "options attempts:N" retries of the same query. RES_DFLRETRY is
defined in resolv.h and "options attempts:N" is optional parameter of
/etc/resolv.conf.