Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Instagram DNS issues

    Scheduled Pinned Locked Moved DHCP and DNS
    27 Posts 5 Posters 3.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      edz
      last edited by

      Thanks johnpoz. So there is not much I can do then?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        Do about what? Keeping your resolver from trying to look them up? You can stop home.lan from being looked up upstream for sure if that is what your asking... That would be simple change to your zone type to static vs transparent

        The one I would be a bit more curious about is the single label query??

        Standard query 0x0850 A coxmvku OPT

        Do you have qname-minimisation enabled? I don't think unbound should query for single label -- Give me a minute to test that..

        edit:
        Oh that is dnsmasq that you can set --domain-needed on, not sure if you can stop those from trying to be resolved with unbound... Hmmm now you got me curious

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        E 1 Reply Last reply Reply Quote 0
        • E
          edz @johnpoz
          last edited by

          @johnpoz said in Instagram DNS issues:

          Hmmm now you got me curious

          ☺ quite an achievement then!

          I have switched to static zone and cannot see those odd DNS queries on the WAN interface, but they do seem to appear on the wireless interface:

          192.168.20.211	192.168.20.1	DNS	68	Standard query 0x18f6 A nsbcvwwe
          192.168.20.1	192.168.20.211	DNS	143	Standard query response 0x18f6 No such name A nsbcvwwe SOA a.root-servers.net
          
          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            But that nsbcvmwwe would still have gone out your public.. There doesn't seem a way to stop those with unbound.. If it concerns you - one simple solution. Is what I do is send all local queries to pihole first, which is running dnsmasq. Which has the domain-needed option set, so those single label domains never even get sent to unbound to try and resolve.

            I would be more curious to to what is generating the single label queries..

            What is that 192.168.20.211 machine? Phone, PC? What os is it running - you see those when you run instagram app?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            E 1 Reply Last reply Reply Quote 0
            • E
              edz @johnpoz
              last edited by

              @johnpoz 192.168.20.211 is an iOS device and those queries are only seen when running instagram. The failure to resolve those domains seems to be causing the issue of Instagra freezing when loading or streaming content.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                That name would be impossible to resolve - that is the correct answer.. Roots are telling you there that nsbcvwwe is NX, and that is coming from the SOA (source of authority)..

                A query fo an A record of just nsbcvwwe, could never resolve, ever - its not a fqdn query.

                If your having issues with instagram - you need to look elsewhere for the problem.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • E
                  edz
                  last edited by

                  Yep, gotcha. But why is Instagram doing this, and why does it not occur on a cellular network?

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    I doubt its instagram - are you loading instagram via chrome... Chrome does those odd queries..

                    Here I just launched chrome on my pc and get stuff like this.

                    chrome.jpg

                    How do you know it doesn't occur on cellular - are you sniffing your dns traffic when your on cellular?

                    https://isc.sans.edu/diary/Google+Chrome+and+weird+DNS+requests/10312/

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • E
                      edz
                      last edited by

                      Interesting. No, this is through the native Instagram app.

                      I am not sniffing my cellular network but when on cellular, the app doesn't freeze when loading content, ever.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by johnpoz

                        Well maybe it "uses" chrome in the background? But that is the correct response to a NX query, ie NX ;)

                        Maybe there is some other query that is failing, or taking a long time? That your missing which is the root of the problem.. But such odd queries are common - and the proper response would be NX.

                        When I grab my phone later - wife is still sleeping and its in the bedroom, I will fire up the instragram app on my iphone and check it out..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • E
                          edz
                          last edited by

                          I've ditched the native iOS app and reverted to using the web app, issue resolved :)

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            You have to have an account to even do anything - shit, yeah not going to do that.. Maybe its login process that is causing the delay?

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            E 1 Reply Last reply Reply Quote 1
                            • E
                              edz @johnpoz
                              last edited by

                              @johnpoz oh go on, use a burner email :p Would be great to have an experts view!

                              I wouldn't think it is the login process as the hanging occurs once I am logged in to the app and browsing content.

                              I get it, Instagram is the devil. I gave up Facebook years ago, perhaps this is the sign to give up Instagram too.

                              1 Reply Last reply Reply Quote 0
                              • E
                                edz
                                last edited by

                                More of this craziness. Is it only me on this forum who uses Instagram on an iOS device?

                                No.	Time	Source	Destination	Protocol	Length	Info
                                1	0.000000	2001:8003:281d:c802:1c8d:e82f:68c5:c1b1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	93	Standard query 0xb8cd A instagram.com
                                2	0.000419	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:1c8d:e82f:68c5:c1b1	DNS	221	Standard query response 0xb8cd A instagram.com A 52.201.106.96 A 35.169.42.209 A 34.236.133.23 A 35.168.91.186 A 34.236.182.19 A 34.232.61.249 A 3.224.36.18 A 52.201.22.32
                                3	1.001545	2001:8003:281d:c802:1c8d:e82f:68c5:c1b1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	93	Standard query 0xb483 AAAA instagram.com
                                4	1.001899	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:1c8d:e82f:68c5:c1b1	DNS	317	Standard query response 0xb483 AAAA instagram.com AAAA 2406:da00:ff00::34c9:1620 AAAA 2406:da00:ff00::22e8:3df9 AAAA 2406:da00:ff00::34c9:6a60 AAAA 2406:da00:ff00::3401:6e34 AAAA 2406:da00:ff00::23ad:9cc7 AAAA 2406:da00:ff00::23a9:2ad1 AAAA 2406:da00:ff00::3e0:2412 AAAA 2406:da00:ff00::22ec:8517
                                5	4.962123	192.168.20.211	192.168.20.1	DNS	79	Standard query 0x0692 AAAA fccinagrga.home.lan
                                6	4.962127	192.168.20.211	192.168.20.1	DNS	79	Standard query 0x1ef4 A fccinagrga.home.lan
                                7	4.962297	192.168.20.211	192.168.20.1	DNS	81	Standard query 0x2749 A pjlgidxjdlzm.home.lan
                                8	4.962371	192.168.20.211	192.168.20.1	DNS	81	Standard query 0xc0e6 AAAA pjlgidxjdlzm.home.lan
                                9	4.962496	192.168.20.211	192.168.20.1	DNS	84	Standard query 0x8974 A pfyymxzqjmlnizw.home.lan
                                10	4.962751	192.168.20.211	192.168.20.1	DNS	84	Standard query 0x0ba3 AAAA pfyymxzqjmlnizw.home.lan
                                11	4.962793	192.168.20.1	192.168.20.211	DNS	154	Standard query response 0x1ef4 No such name A fccinagrga.home.lan SOA a.root-servers.net
                                12	4.962796	192.168.20.1	192.168.20.211	DNS	154	Standard query response 0x0692 No such name AAAA fccinagrga.home.lan SOA a.root-servers.net
                                13	4.962917	192.168.20.1	192.168.20.211	DNS	156	Standard query response 0xc0e6 No such name AAAA pjlgidxjdlzm.home.lan SOA a.root-servers.net
                                14	4.962924	192.168.20.1	192.168.20.211	DNS	156	Standard query response 0x2749 No such name A pjlgidxjdlzm.home.lan SOA a.root-servers.net
                                15	4.963025	192.168.20.1	192.168.20.211	DNS	159	Standard query response 0x8974 No such name A pfyymxzqjmlnizw.home.lan SOA a.root-servers.net
                                16	4.963039	192.168.20.1	192.168.20.211	DNS	159	Standard query response 0x0ba3 No such name AAAA pfyymxzqjmlnizw.home.lan SOA a.root-servers.net
                                17	4.970590	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	104	Standard query 0x0f01 AAAA pfyymxzqjmlnizw.home.lan
                                18	4.970897	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	179	Standard query response 0x0f01 No such name AAAA pfyymxzqjmlnizw.home.lan SOA a.root-servers.net
                                19	4.973581	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	95	Standard query 0xd548 AAAA pfyymxzqjmlnizw
                                20	5.001613	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	170	Standard query response 0xd548 No such name AAAA pfyymxzqjmlnizw SOA a.root-servers.net
                                21	5.975287	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	99	Standard query 0xa01c A fccinagrga.home.lan
                                22	5.975291	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	99	Standard query 0x8546 AAAA fccinagrga.home.lan
                                23	5.975725	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	101	Standard query 0x1e10 A pjlgidxjdlzm.home.lan
                                24	5.975799	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	101	Standard query 0xda80 AAAA pjlgidxjdlzm.home.lan
                                25	5.975808	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	104	Standard query 0x676d A pfyymxzqjmlnizw.home.lan
                                26	5.975860	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	174	Standard query response 0xa01c No such name A fccinagrga.home.lan SOA a.root-servers.net
                                27	5.975972	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	176	Standard query response 0x1e10 No such name A pjlgidxjdlzm.home.lan SOA a.root-servers.net
                                28	5.975992	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	179	Standard query response 0x676d No such name A pfyymxzqjmlnizw.home.lan SOA a.root-servers.net
                                29	5.976019	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	174	Standard query response 0x8546 No such name AAAA fccinagrga.home.lan SOA a.root-servers.net
                                30	5.976069	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	176	Standard query response 0xda80 No such name AAAA pjlgidxjdlzm.home.lan SOA a.root-servers.net
                                31	5.979891	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	92	Standard query 0x0a5d A pjlgidxjdlzm
                                32	5.979896	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	90	Standard query 0xc511 AAAA fccinagrga
                                33	5.979898	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	92	Standard query 0x1c24 AAAA pjlgidxjdlzm
                                34	5.979905	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	95	Standard query 0xed57 A pfyymxzqjmlnizw
                                35	5.980071	2001:8003:281d:c802:c046:3a94:9c02:53f1	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	90	Standard query 0xa97b A fccinagrga
                                36	5.981185	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	170	Standard query response 0xed57 No such name A pfyymxzqjmlnizw SOA a.root-servers.net
                                37	6.006253	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	165	Standard query response 0xa97b No such name A fccinagrga SOA a.root-servers.net
                                38	6.006295	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	167	Standard query response 0x0a5d No such name A pjlgidxjdlzm SOA a.root-servers.net
                                39	6.006345	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	165	Standard query response 0xc511 No such name AAAA fccinagrga SOA a.root-servers.net
                                40	6.109798	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:c046:3a94:9c02:53f1	DNS	167	Standard query response 0x1c24 No such name AAAA pjlgidxjdlzm SOA a.root-servers.net
                                41	33.777903	192.168.20.25	192.168.20.1	DNS	77	Standard query 0x0002 A ps-788.pubnub.com
                                42	33.778299	192.168.20.1	192.168.20.25	DNS	130	Standard query response 0x0002 A ps-788.pubnub.com CNAME pubsub.pubnub.com A 54.249.82.169 A 54.249.82.168
                                43	36.326473	192.168.20.211	192.168.20.1	DNS	78	Standard query 0xa733 A yjssygfqg.home.lan
                                44	36.326479	192.168.20.211	192.168.20.1	DNS	78	Standard query 0x5502 AAAA upswygzru.home.lan
                                45	36.326498	192.168.20.211	192.168.20.1	DNS	78	Standard query 0xd2a4 A upswygzru.home.lan
                                46	36.326691	192.168.20.211	192.168.20.1	DNS	78	Standard query 0x490e AAAA yjssygfqg.home.lan
                                47	36.327049	192.168.20.211	192.168.20.1	DNS	78	Standard query 0x8e61 AAAA qfjqynrec.home.lan
                                48	36.327075	192.168.20.211	192.168.20.1	DNS	78	Standard query 0x7639 A qfjqynrec.home.lan
                                49	36.327270	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0x5502 No such name AAAA upswygzru.home.lan SOA a.root-servers.net
                                50	36.327271	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0xd2a4 No such name A upswygzru.home.lan SOA a.root-servers.net
                                51	36.327273	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0x490e No such name AAAA yjssygfqg.home.lan SOA a.root-servers.net
                                52	36.327283	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0xa733 No such name A yjssygfqg.home.lan SOA a.root-servers.net
                                53	36.327418	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0x8e61 No such name AAAA qfjqynrec.home.lan SOA a.root-servers.net
                                54	36.327448	192.168.20.1	192.168.20.211	DNS	153	Standard query response 0x7639 No such name A qfjqynrec.home.lan SOA a.root-servers.net
                                55	36.335718	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0x653d AAAA qfjqynrec.home.lan
                                56	36.336319	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0x653d No such name AAAA qfjqynrec.home.lan SOA a.root-servers.net
                                57	36.338028	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0x8e19 AAAA qfjqynrec
                                58	36.351236	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0x8e19 No such name AAAA qfjqynrec SOA a.root-servers.net
                                59	37.337286	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0x6f88 AAAA upswygzru.home.lan
                                60	37.337389	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0x90ad A upswygzru.home.lan
                                61	37.337689	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0x90ad No such name A upswygzru.home.lan SOA a.root-servers.net
                                62	37.337770	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0x00fb A qfjqynrec.home.lan
                                63	37.337791	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0xc8c2 A yjssygfqg.home.lan
                                64	37.337895	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	98	Standard query 0x8685 AAAA yjssygfqg.home.lan
                                65	37.337937	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0x6f88 No such name AAAA upswygzru.home.lan SOA a.root-servers.net
                                66	37.337960	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0x00fb No such name A qfjqynrec.home.lan SOA a.root-servers.net
                                67	37.337981	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0xc8c2 No such name A yjssygfqg.home.lan SOA a.root-servers.net
                                68	37.338081	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	173	Standard query response 0x8685 No such name AAAA yjssygfqg.home.lan SOA a.root-servers.net
                                69	37.341283	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0x61df AAAA upswygzru
                                70	37.341291	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0xf8a8 A qfjqynrec
                                71	37.341501	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0x7d58 A yjssygfqg
                                72	37.341564	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0xbb15 AAAA yjssygfqg
                                73	37.341626	2001:8003:281d:c802:d19:5c00:568b:ef7b	2001:8003:281d:c802:20d:b9ff:fe53:2a11	DNS	89	Standard query 0x6225 A upswygzru
                                74	37.341803	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0xf8a8 No such name A qfjqynrec SOA a.root-servers.net
                                75	37.354938	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0x7d58 No such name A yjssygfqg SOA a.root-servers.net
                                76	37.354978	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0x6225 No such name A upswygzru SOA a.root-servers.net
                                77	37.366798	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0x61df No such name AAAA upswygzru SOA a.root-servers.net
                                78	37.370878	2001:8003:281d:c802:20d:b9ff:fe53:2a11	2001:8003:281d:c802:d19:5c00:568b:ef7b	DNS	164	Standard query response 0xbb15 No such name AAAA yjssygfqg SOA a.root-servers.net
                                
                                
                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by johnpoz

                                  And what is in there that you think is odd?

                                  Or that didn't resolve? Or is problematic?

                                  Already went over what those random hostname queries are. If you don't want your phone to use IPv6, then don't setup IPv6 on your wireless network.

                                  Look at your response times - they are normal even.

                                  What I don't see is any queries for actual Instagram domains..

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • E
                                    edz
                                    last edited by

                                    I started the trace then opened the app, I can see the first 4 lines of the capture requesting and resolve the Instagram domain, then it goes into a fizzy with the whole random domain that you have rightly mentioned is a common thing when using Chrome.

                                    Odd that it's problematic and doesn't seem anyone else running pfSense with DNS Resolver and pfBlocker is having any issues with the Instagram app.

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      Have you tried turning off IPv6? Maybe your IPv6 is spotty?

                                      Not sure how I missed the instagram queries - but again, I don't see anything in there that didn't resolve how it should, nor any long response times..

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        edz
                                        last edited by

                                        Thanks, johnpoz. I'll try disabling IPv6, if it is spotty I'd expect to see it across other applications but it's worth a shot.

                                        1 Reply Last reply Reply Quote 0
                                        • E
                                          edz
                                          last edited by

                                          OK, a few hours after disabling IPv6 on my wireless LAN interface and I have had no issues with the Instagram app on iOS. I have left IPv6 enabled on other VLAN's as I am not seeing any issues there.

                                          Seems like one other person is also experiencing a similar issue:

                                          https://forum.netgate.com/topic/131271/when-6to4-ipv6-is-enabled-facebook-mobile-does-not-fully-load-all-videos-and-pictures-ios-and-android/21

                                          https://www.reddit.com/r/PFSENSE/comments/8luf26/had_to_disable_ipv6_for_facebook_mobile_apps_to/

                                          1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator
                                            last edited by johnpoz

                                            Well jknott will tell you different, but to be honest I am not really a fan of ipv6... Running dual stack leads to many issues to be honest.. I only run it on a few test devices..

                                            While it is the future for sure, there is nothing that says you need it or have to run it - or really to be honest any advantages to it currently - other than problems to be honest.

                                            Its not that there is anything wrong with the protocol, its the implementations and skill sets of people setting it up and maintaining to be honest.. When there is weirdness, its always a good troubleshooting step to disable it and see if issue goes away.

                                            I have been using it myself for 10 years, but only in test mode.. I serve up ntp to the public on it for example.. And run some dns for it.. And sure access some stuff (testing) via IPv6.. But in general is not active on my systems.. Other than my ntp server.

                                            My current isp doesn't even support it, and my last isp comcast - that is suppose to be one of the leaders just had so many issues not worth it. I just run a tunnel via HE for my ipv6 needs. And with that its pretty rock solid - but I just don't see a reason... One one of the major players only has IPv6, when you can only get to google via IPv6 - then its ready for primetime.. You would think that the game makers would love it - and they have yet to actually embrace it to be honest.

                                            So I wouldn't worry to much to just completely disabling it.. Unless you can name 1 service that actually requires it, there is no reason to run it is my point.

                                            Glad that you got your issue sorted.

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.