Dynamic DNS with Route53 Not Working

despejel

Hi All

II have been trying to identify the problem for quite a while.
I am monitoring a group of gateways in failover mode to keep my DNS record updated on Route53. everything seems fine but the records are not being updated in my DNS, pfsense detects the gateway changes and makes the request to route53 correctly, but the update is simply not being applied.

The keys and other information is valid, even enabling verbose mode and copying the query sent by pfsense to run it from curl on my pc works which makes me think that the request generated from pfsense is failing.

/services_dyndns_edit.php: Response Header and Response Data from logging are always empty, however, it always reports that the operation was successful. Even inserting erroneous data in the keys and ids the response returned is success

I tried changing the interface to be monitored for a specific wan to rule out any problem with the gateway group but the result is still the same.

Here is my log

Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS: updatedns() starting
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS route53 (host.dummydomain.com): My_Active_IP_Address extracted from local system.
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS (host.dummydomain.com): running get_failover_interface for wan. found lagg0
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS route53 (host.dummydomain.com): _update() starting.
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Sending request to: https://route53.amazonaws.com/2013-04-01/hostedzone/XXXXXXXXXXXXXX/rrset
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Header: Content-Type: text/xml
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Header: X-Amz-Date: 20220106T203035Z
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Header: Authorization: AWS4-HMAC-SHA256 Credential=XXXXXXXXXXXXXXXXXXXX/20220106/us-east-1/route53/aws4_request, SignedHeaders=content-type;host;x-amz-date, Signature=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: XMLPOST: <?xml version="1.0" encoding="UTF-8"?><ChangeResourceRecordSetsRequest xmlns="https://route53.amazonaws.com/doc/2013-04-01/"><ChangeBatch><Changes><Change><Action>UPSERT</Action><ResourceRecordSet><Name>host.dummydomain.com</Name><Type>A</Type><TTL>60</TTL><ResourceRecords><ResourceRecord><Value>My_Active_IP_Address</Value></ResourceRecord></ResourceRecords></ResourceRecordSet></Change></Changes></ChangeBatch></ChangeResourceRecordSetsRequest>
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Response Header:
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Response Data:
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS route53 (host.dummydomain.com): _checkStatus() starting.
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: Dynamic DNS route53 (host.dummydomain.com): My_Active_IP_Address extracted from local system.
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: phpDynDNS: updating cache file /conf/dyndns_Main_Gateway_Grouproute53'host.dummydomain.com'0.cache: My_Active_IP_Address
Jan 6 14:30:35	php-fpm	28742	/services_dyndns_edit.php: phpDynDNS (host.dummydomain.com): (Success) IP address changed successfully

could it be a connectivity problem with amazon, timeout in the curl request?, a possible bug? anyone have an idea how to proceed with any other tests?

in case it helps, my gateway group consists of 3 services, tier1 to tier3, default gateway is this same gateway group.
all my service vlans are on lagg.

Device is an XG-1537 running 21.05.2-RELEASE

Regards