Debian 13 SSH Login Slow Due to Reverse DNS Lookup

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

SSH sessions pause several seconds before the password or key prompt appears.

Environment & Reproduction

Frequent on hosts with unreachable or slow DNS resolvers.

Root Cause Analysis

`sshd` waits for reverse DNS lookup during connection processing.

Quick Triage

Measure name resolution latency from the server.

Step-by-Step Diagnosis

Check sshd logs for delayed host lookup messages.

Solution – Primary Fix

Disable reverse DNS lookup in SSH daemon settings.

Solution – Alternative Approaches

Fix DNS PTR records and resolver reachability instead of changing sshd behavior.

Verification & Acceptance Criteria

SSH authentication prompt appears without multi-second delay.

Rollback Plan

Revert `UseDNS` setting and reload SSH service if policy requires DNS checks.

Prevention & Hardening

Maintain accurate PTR records for managed client networks.

Related Errors & Cross-Refs

Related to GSSAPI delays and blocked outbound DNS traffic.

Related tutorial: View the step-by-step tutorial for Debian 13.

View all Debian 13 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

OpenSSH server performance and logging references.