Sorry for bumping an old thread but I just came upon this today, no idea why this DNS traffic was going over my tier 2 failover wan link as it is an LTE AP and I get billed for data, so nothing should be going out on this WAN link. Setting the floating rule did help to reduce the traffic to almost negligible. Still very weird.