DNS over TLS with CloudFlare not working for LAN hosts
-
Good to know, thanks Jim.
-
Doesn't work well, for me anyway. I have DNSBL enabled and my options look like this:
server:include: /var/unbound/pfb_dnsbl.*conf forward-zone: name: "." forward-ssl-upstream: yes forward-addr: 1.1.1.1@853 forward-addr: 1.0.0.1@853
many websites don't load at all or very slow (some are ok), iOS Appstore won't work either.
-
Cloudflare 's 1.1.1.1 server has been flaky for some people since it launched, try adding a line for 9.9.9.9 instead of 1.1.1.1
-
Doesn't work well, for me anyway. I have DNSBL enabled and my options look like this:
server:include: /var/unbound/pfb_dnsbl.*conf forward-zone: name: "." forward-ssl-upstream: yes forward-addr: 1.1.1.1@853 forward-addr: 1.0.0.1@853
many websites don't load at all or very slow (some are ok), iOS Appstore won't work either.
Cloudflare 1.1.1.1 and 1.0.0.1 is having issues with TLS atm. A Cloudflare team member mentioned that they will be releasing an update soon to correct it but there is no eta yet.
Try the following:
server: include: /var/unbound/pfb_dnsbl.*conf ssl-upstream: yes do-tcp: yes forward-zone: name: "." forward-addr: 9.9.9.9@853
That's Quad9 for the moment… you can reverse back to Cloudflare DNS once the issue has been resolved.
-
Hi,
Strange, when i use forward-addr: 9.9.9.9@853 is working, but when I change to forward-addr: 1.1.1.1@853 or forward-addr: 1.0.0.1@853 i lose my Internet.
Any idea?
Thanks
-
Cloudflare has a problem with Unbound right now, they are not handling how it sends requests properly with tls. They say it's going to be fixed soon.
-
Cloudflare has a problem with Unbound right now, they are not handling how it sends requests properly with tls. They say it's going to be fixed soon.
Read on their Community this morning the update related to Unbound was released overnight. Testing here I still have an issue with 1.1.1.1 but 1.0.0.1 is fine. The issue covered here they created overnight a night ago with Unbound has been addressed though. No errors in my log. Now I just need to looking what is using 1.1.1.1 already.
-
I think they have solved it - it started working for me.
-
Yep, working for me now too.
-
For me resolution does not work always.
I use MultiWAN with failover and it seems that if one gateway is down, resolution hangs.