Context
I have created similar topic in the past but it got nowhere, this is a serious problem now coz of digital ID bs, and I am hoping to have a different outcome: Maximum number of concurrent DNS queries reached (max: 150)
Expected Behaviour:
Process non-blocked DNS requests no matter what.
Actual Behaviour:
With countries going with this “protect the kids” nonsense, websites and even posts on X no longer load unless you provide a document to identify yourself. Suuuuuuuuuuure.
The workaround assuming you run OPNSense or anything alike it:
- Setup VPN like Proton/Mullvad
- Create firewall aliases that resolve DNS like so https://raw.githubusercontent.com/antonme/ipnames/refs/heads/master/dns-twitter.txt
- Create NAT firewall rule that identify when you are trying to access x[.]com and forward the request from any of those DNS via the VPN instead of your home WAN
- Voila
dns-twitter.txt has over 200 DNS entrances meaning, as soon as it is added to OPNSense, it tries to resolve them to create a URL Tables (IPs).
Pihole poops the bed and crash because of its 150 concurrent DNS queries.
The few queries it process, posts that required ID before, start working just fine but then everything goes down.
I have been running Pihole + Unbound recursive DNS since forever (its local DNS for all the Proxmox containers is really something else) and this 150 concurrent DNS queries always gave me hell coz of my Samsung smartTV.
But now this is a serious problem, and I am hopping to have a happier ending this time.
Pihole Setup
Is there any flag, anything I can add in here during installation to remove this 150 restriction?
I don’t mind If I have to reinstall it coz it is automated, otherwise, I will have to abandon Pihole after all these years. I am not having this digital ID crappy for real.
Thanks a ton
- name: Copy config files to LXC container
ansible.builtin.command: >
pct push {{ lxc_id }} {{ item.src }} {{ item.dest }}
loop:
- { src: '/tmp/99-pihole.conf', dest: '/etc/sysctl.d/99-custom.conf' }
- { src: '/tmp/pihole.toml', dest: '/etc/pihole/pihole.toml' }
- { src: '/tmp/adlist.sql', dest: '/tmp/adlist.sql' }
- name: Install Pi-Hole
ansible.builtin.command: >
pct exec {{ lxc_id }} -- bash -c "
curl -sSL https://install.pi-hole.net | sudo -E bash /dev/stdin --unattended;
"
- name: Import lists and hotfixes
ansible.builtin.command: >
pct exec {{ lxc_id }} -- bash -c "
pihole-FTL --config ntp.sync.interval 0;
systemctl stop pihole-FTL;
sqlite3 /etc/pihole/gravity.db < /tmp/adlist.sql;
systemctl start pihole-FTL;
sudo pihole -g
"
