SSH Login Slow Due to Reverse DNS Lookup

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

SSH connections pause for several seconds before password/prompt appears, slowing operations and automation jobs.

Environment & Reproduction

RHEL 8 OpenSSH server in networks with missing or slow PTR DNS records.

Root Cause Analysis

sshd performs reverse DNS checks that time out or fail repeatedly for client IPs.

Quick Triage

Test ssh -vvv timing, inspect /etc/ssh/sshd_config, and resolve client IP with host or dig -x from server.

Step-by-Step Diagnosis

Check journalctl -u sshd for delayed auth flow and DNS-related warnings.

Solution – Primary Fix

Set UseDNS no in sshd_config when policy permits, then systemctl reload sshd. Alternatively fix PTR records in DNS.

Solution – Alternative Approaches

Reconnect with ssh and measure reduced time to prompt. Confirm authentication and logging remain normal.

Verification & Acceptance Criteria

Re-enable UseDNS if required by policy and optimize DNS infrastructure latency instead.

Rollback Plan

Keep forward and reverse DNS records aligned for managed address pools.

Prevention & Hardening

Document SSH daemon setting deviations and ensure centralized access logs are retained.

Related Errors & Cross-Refs

Use configuration management to enforce sshd_config settings and trigger controlled daemon reload.

Related tutorial: View the step-by-step tutorial for rhel-8.

View all rhel-8 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

sshd_config(5), RHEL 8 OpenSSH hardening guidance, and enterprise DNS best practices.