FreeBSD 13 Login Delays Caused by Reverse DNS Lookup

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Interactive login latency on FreeBSD 13 is often tied to reverse DNS resolution during authentication.

Environment & Reproduction

SSH and console-authenticated sessions pause for several seconds before presenting a shell prompt.

Root Cause Analysis

Slow or unreachable PTR lookup path, resolver timeout settings, or strict DNS verification defaults.

Quick Triage

Check sshd logs, test reverse lookups with host, and benchmark resolver response times.

Step-by-Step Diagnosis

Measure baseline login delay and current resolver behavior. image_ref=0

Solution – Primary Fix

Tune resolver reliability, adjust UseDNS policy when appropriate, and restart sshd to apply changes. image_ref=1

Solution – Alternative Approaches

Apply daemon changes with service sshd restart and keep startup enabled via sysrc.

Verification & Acceptance Criteria

Update /etc/ssh/sshd_config and /etc/resolv.conf carefully to reduce DNS-induced authentication waits.

Rollback Plan

Ensure DNS traffic through pf is permitted and reverse lookup servers are reachable over active routes.

Prevention & Hardening

Retest login timing from multiple clients and verify authentication and audit logs remain correct.

Related Errors & Cross-Refs

Monitor resolver latency and login performance trends to catch regressions early.

Related tutorial: View the step-by-step tutorial for freebsd-13.

View all freebsd-13 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

See man sshd_config, man resolv.conf, and FreeBSD network troubleshooting resources.