The issue I am facing:
- Slow DNS resolution, including
NXDOMAIN
even though Unbound resolves it fine - Debug: https://tricorder.pi-hole.net/6JFM6Dxz/
Details about my system:
- Two RPis, one running unbound (yes,
interface: 0.0.0.0
), one running PiHole - PiHole (and other Debian instances) can dig through to Unbound and receive an answer. After the answer, PiHole is able to do the lookup
- The Windows computer that I use PiHole for is VERY SLOW since the upgrade this morning (To Raspbian Bookworm and latest PiHole). Names are not resolving until after I clear the DNS cache. It works for a few minutes, then it goes back to not resolving
What I have changed since installing Pi-hole:
- Updated OS to 12.10; piHole to 6.0.6, FTL 6.1
- Unbound OS to 12.10; unbound to 1.17.1
- Restarting PiHole works for a few minutes; after that, sites stop loading external resources (i.e. Reddit thumbnails)
maxDB
setting already set to 91 as per other threads- Disabled DNSSEC for testing
Example output from unbound:
root@donatello:/home/pi# dig b.thumbs.redditmedia.com. @127.0.0.1 -p 5353
; <<>> DiG 9.18.33-1~deb12u2-Raspbian <<>> b.thumbs.redditmedia.com. @127.0.0.1 -p 5353
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59153
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;b.thumbs.redditmedia.com. IN A
;; AUTHORITY SECTION:
redditmedia.com. 882 IN SOA ns-1340.awsdns-39.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
;; Query time: 109 msec
;; SERVER: 127.0.0.1#5353(127.0.0.1) (UDP)
;; WHEN: Sun Apr 06 19:47:43 PDT 2025
;; MSG SIZE rcvd: 135
From PiHole:
root@raphael:/home/pi# dig b.thumbs.redditmedia.com @127.0.0.1
; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> b.thumbs.redditmedia.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11699
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;b.thumbs.redditmedia.com. IN A
;; ANSWER SECTION:
b.thumbs.redditmedia.com. 206 IN CNAME dualstack.reddit.map.fastly.net.
dualstack.reddit.map.fastly.net. 36 IN A 151.101.21.140
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Apr 06 19:48:23 PDT 2025
;; MSG SIZE rcvd: 114