AdguardTeam / AdguardTeam/AdGuardHome

SERVFAIL response does not count as a failure

Aperta
#7,292 2 commenti 5 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
TypeScript
Stelle
36.9k
Fork
2.5k
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

### Prerequisites

- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) and found no answer

- [X] I have searched other issues and found no duplicates

- [X] I want to report a bug and not [ask a question or ask for help](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a)

- [X] I have set up AdGuard Home correctly and [configured clients to use it](https://github.com/AdguardTeam/AdGuardHome/wiki/Clients). (Use the [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions/categories/q-a) for help with installing and configuring clients.)

### Platform (OS and CPU architecture)

Linux, AMD64 (aka x86_64)

### Installation

Docker

### Setup

On a router, DHCP is handled by the router

### AdGuard Home version

v0.107.52

### Action

This evening, cloudflare's DNS was having issues, as reported on their Status Page.
When doing an NSLOOKUP, the server would respond with SERVFAIL

![image](https://github.com/user-attachments/assets/ccc52a2d-52da-447f-b008-d86b52bb050a)

My adguardhome instance uses 1 upstream DNS providers:
````
tls://.cloudflare-gateway.com
````

I have et the fallback DNS server to:
````
quic://unfiltered.adguard-dns.com
````

Adguardhome didn't use the fallback DNS, and instead, my entire network was down due to not being able to resolve names.

In order to temporarily fix the issue, i added ````quic://unfiltered.adguard-dns.com```` as a second DNS server on the list, and set it to load balance. This partially solved the issue, but since AGH didn't consider the SERVFAIL as a failure, some of my requests continued to be sent to cloudflare, and my network had intermitent name resolution.

The only way to fix the issue was to commnent out the cloudflare dns address from my list of upstream resolvers, until they fixed the issue.

### Expected result

AGH should identify SERVFAIL responses as being a bad response, and use the fallback resolver.

In load balanced mode, AGH should identify a SERVFAIL response and stop using that upstream server for a while.

### Actual result

AGH continued to act as if cloudflare was giving good DNS responses, despite the SERVFAIL status.

![image](https://github.com/user-attachments/assets/c36fd76a-9f5c-44a4-959f-44c72e363830)

### Additional information and/or screenshots

_No response_

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.