Racy conntrack and DNS lookup timeouts

Recently there were many Kubernetes user bug reports about DNS lookups from Pods sometimes taking 5 or even more seconds. In this blog post I will explain the root causes for such delays, discuss some mitigations and present some kernel fixes.