Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Slow DNS after 22.05

    Scheduled Pinned Locked Moved DHCP and DNS
    270 Posts 31 Posters 140.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @istacey
      last edited by Gertjan

      @istacey said in Slow DNS after 22.05:

      I can't see how I stop a BIND setup doing this.

      Bind has nothing to do with the DNS server IP, send by the DHCP server to a client that requests a lease.
      See for example here : a DHCP request and answer :

      https://forum.netgate.com/topic/174366/mac-does-not-get-dns-server-address-from-dhcp/16?_=1665229390288

      If your LAN clients receives "8.8.8.8" as a DNS server IP during the lease negotiation, check your DHCP server settings.
      The DHCP server doesn't know what '8.8.8.8' is unless you've instructed it.

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      I 1 Reply Last reply Reply Quote 0
      • I
        istacey @Gertjan
        last edited by

        @gertjan Yes, my fault! I'd left DNS servers configured in the General Settings. Removed these now and DHCP is issuing my firewall address as DNS... but now I need to work out how to make BIND work properly because that's left nothing resolving! ๐Ÿ˜•

        S 1 Reply Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @istacey
          last edited by

          @istacey Had you tried the DNS Forwarder feature instead of Resolver?

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote ๐Ÿ‘ helpful posts!

          I 1 Reply Last reply Reply Quote 0
          • I
            istacey @SteveITS
            last edited by

            @steveits I'm using the forwarder only because the Unbound resolver is unreliable. But the forwarder doesn't give me the things I need so I wanted something the resolver.

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @istacey
              last edited by

              @istacey said in Slow DNS after 22.05:

              But the forwarder doesn't give me the things I need

              What is that exactly?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              V 1 Reply Last reply Reply Quote 0
              • V
                vbjp @johnpoz
                last edited by vbjp

                Problems with my unbound DNS resolver stopping to resolve certain domains randomly seems to be reduced or even solved by setting Unbound EDNS Buffer Size to
                4096 - Unbound default in advanced settings.
                Need more testing but currently it looks promising.

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @vbjp
                  last edited by

                  @vbjp what was it before, 4096 is the unbound default is it not, that is what mine says.

                  default.jpg

                  And if I look at my 2.6 VM, which I would not have touched shows automatic based on mtu.. I prob edit my main system long time I ago to 4096.. Which per the doc's is the max udp size default.

                  default.jpg

                  If that that is a problem, then that would explain why I have never seen any of these issues others have reported, as well as I my setting of not doing IPv6 for dns. Which I also think came up as being problematic for this version of unbound at least.

                  ipv6no.jpg

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  V 1 Reply Last reply Reply Quote 0
                  • V
                    vbjp @johnpoz
                    last edited by

                    @johnpoz
                    Never changed any setting for that also 2.6 an 22.01 worked without any problems. Problem started with 22.05 update.
                    Did not check what it was in previous versions but in 22.05 that setting was set to "Automatic value based on active interface MTUs"
                    And I think it cased all the problems in 22.05 with DNS resolution intermittent failures, mostly it failed to resolve co.jp domains while I rarely saw problems with .com domains like amazon.com haven't seen failing, while Amazon.co.jp failed at least few times a day.
                    I also had ipv6 disabled in custom options as per some suggestions in this thread but it didn't solve my problem.

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @vbjp
                      last edited by

                      @vbjp if I had to guess something about fallback to tcp in this version of unbound, and if your udp size is set lower its quite possible you are switching over to tcp more often, etc.

                      IPv6 is quite likely to switch over to tcp more often, especially if there is a lower mtu setting for the udp size, which IPv6 does normally have a lower mtu of like 1280 or something, etc. etc..

                      It will be good when the unbound version updates on pfsense to see if the issues people are seeing go away.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      V 1 Reply Last reply Reply Quote 0
                      • V
                        vbjp @johnpoz
                        last edited by vbjp

                        @johnpoz my isp uses pppoe (in Japan lots of ISPs still doing this stuff) and require lower than standard MTU on wan maybe related..

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @vbjp
                          last edited by

                          @vbjp could be.. I rarely see any tcp queries being done..

                          So if I look at my stats..

                          total.num.queries=62685
                          

                          And then look at how many outbound tcp queries were done compared..

                          num.query.tcpout=48
                          

                          That is just not even a blip.. This is with my unbound being up for bit over 3.5 days.. since its last restart.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • GertjanG Gertjan referenced this topic on
                          • S scottlindner referenced this topic on
                          • S scottlindner referenced this topic on
                          • I
                            istacey
                            last edited by

                            I've just updated to 23.01-RELEASE (arm) and the problem I threw into this lengthy debate appears to have gone away now.

                            1 Reply Last reply Reply Quote 1
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.