Your K3s DNS Fails a Few Times a Day. The Culprit Isn't ndots:5 or conntrack — It's Both, Multiplied
Intermittent DNS failures in K3s usually come from ndots:5 query amplification combined with a UDP conntrack race condition. We break down NodeLocal DNSCache's benefits and side effects, plus K3s's own coredns-custom persistence trap.