I noticed looking at another issue that some CloudVPS instances are still sending DNS queries to the ns-recursor0.openstack.eqiad1.wikimediacloud.org IP:
root@cloudnet1005:~# tcpdump -i qr-defc9d1d-40 -l -p -nn host 172.16.0.17 and port 53 tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on qr-defc9d1d-40, link-type EN10MB (Ethernet), snapshot length 262144 bytes 23:05:40.835546 IP 172.16.0.17.39310 > 208.80.154.143.53: 37405+ A? syslogaudit2.svc.eqiad1.wikimedia.cloud. (57) 23:05:40.835856 IP 208.80.154.143.53 > 172.16.0.17.39310: 37405 1/0/0 A 172.16.5.118 (73)
These need to be changed to use ns-recursor.openstack.eqiad1.wikimediacloud.org / 172.20.255.1 before we move cloudservices1005.