Reducing DNS packet size for nameserver 1.1.1.1 to 1232

[chenks]

Hi

all of sudden, over the past few days i've started seeing these in the diagnosis logs

Warning in `dnsmasq` core:
reducing DNS packet size for nameserver 1.1.1.1 to 1232
reducing DNS packet size for nameserver 1.0.0.1 to 1232

i use Cloudflare (DNSSEC) on IPv4 (no IPv6 enabled) with DNSSEC enabled.

now, whilst it is said that these are just warnings and not errors, it seems strange that they should only just start appearing after months of having none.

• Docker Tag [2021.12.1]
• Pi-hole [v5.11.4]
• FTL [v5.16.1]
• Web Interface [v5.13]

[jfb]

Did you read the documentation that is linked below the warning?

[chenks]

yes, it says to add

edns-packet-max=1232

to

/etc/dnsmasq.d/99-edns.conf

however, previous threads have suggested that acutally isn't necessarily a good thing to do.

i'm more interested as to why it has suddently started happening.

[jfb]

@chenks

i'm more interested as to why it has suddently started happening.

You are occasionally sending packets larger than 1232.

[chenks]

why all of a sudden when up until a few days ago i wasn't?
nothing has changed at my end in terms of config on any network related device.

[jfb]

Packet sizes vary normally. Now you have hit a larger size than the upstream DNS server will accept. It's nothing to worry about, as long as your queries are being answered.