Understanding VPN ProxyVM

What’s the work qube template? The same fedora-40 as for disposable?
Maybe it’s an MTU issue, but in that case I’m not sure why it works in one qube but not in another:

Are you accessing it directly using IP address or domain name?

So it seems I’ve been having some issues with DNS resolution in those qubes.

One problem I’ve encountered was I could not resolve git repo hostname:

# in a project set to `git@vpn-protected-git.com:foo/bar.git`
[user@work-qube]$ git fetch --all
ssh: Could not resolve hostname vpn-protected-git.com: Name or service not known
fatal: Could not read from remote repository.

What is weird is that I could open vpn-protected-git.com in Firefox browser. Also ping vpn-protected-git.com worked.

What helped was to check the IP via nslookup vpn-protected-git.com and then add it manually to /etc/hosts file.

After that I could run git commands again. It seems it was some issue with DNS cacheing, because I have later removed that manual entry from /etc/hosts and git is still working.

I have seen suggestions online that I could run sudo resolvectl flush-caches to clear DNS cache in Fedora. I’ve checked with sudo systemctl status systemd-resolved and indeed I have this service enabled (Fedora 40), so that might work aswell.

Also, I have recreated my proxy-vm from scratch, just to have a clean installation (in the original qube I was experimenting a lot with configuration). After fixing the DNS cache issue - everything worked fine today, so hopefully thats the end of it.