Use IPTables NOTRACK to implement stateless rules and reduce packet loss
Disabling IPTables connection tracking for DNS can resolve problems due to too many connections in the connection table.
DNS
Use Getent Hosts in Scripts
It is common practice to use tools like ‘dig’ to lookup DNS results, but this has very bad performance. If you just need to lookup a name or address, there’s an easier, friendly way.