From 229077d5863d7cc036e616a43ad1678c6c982be1 Mon Sep 17 00:00:00 2001 From: Kaloyan Danchev Date: Sat, 10 Oct 2026 21:02:04 +0300 Subject: [PATCH] DNS: add Cloudflare DoH + plain fallback upstreams to AdGuard Co-Authored-By: Claude Opus 5.5 --- docs/CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 6a6fe35..bd8a7a3 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -10,6 +10,7 @@ - **[NETWORK]** New on-demand container `speedtest` on the hAP (alpine + Ookla CLI 1.2.0 aarch64): veth-speedtest 172.17.0.4/24, gateway 172.17.0.1, /32 route, mount `/usb1/speedtest` → `/opt/st` (`run.sh` + cached binary). start-on-boot=no. Run: `/container start speedtest`; the result appears in `/log`. - **[DNS]** Fixed DNS failover for VLAN 10: added srcnat masquerade (UDP+TCP) `192.168.10.0/24 → 192.168.10.10:53` (comment `[DNS] VLAN10 hairpin to Unraid AdGuard (failover)`). Before this, VLAN 10 clients got no answer during failover, because Unraid replied directly from the same subnet. Verified with a real failover. - **[DNS]** MikroTik AdGuard v0.107.71 → v0.107.79 (container recreated from `adguard/adguardhome:latest`; config and stats live in the mounts and were kept). Config backup taken before the upgrade. +- **[DNS]** AdGuard upstreams (both instances): Quad9 DoH + Cloudflare DoH (load balance), fallback 9.9.9.9 / 1.1.1.1, bootstrap + 1.1.1.1. Quad9 `unexpected EOF` errors went down from ~50 to 4 per 15 min, with 0 SERVFAIL. Note: `adguardhome-sync` syncs Unraid → MikroTik (Unraid is the source of truth). - **[NETWORK]** Ookla baseline (Vivacom, Sofia servers): hAP 922/676 Mbit/s, Unraid 924/674 Mbit/s. TCP bandwidth-test hAP↔CAP: CAP XL 674/367, CAP AC 690/514 Mbit/s (limited by the CAP CPU). The Mac reaches only ~290 Mbit/s because its Realtek USB NIC runs at USB 2.0 behind the hub in the Dell monitor. ## 2026-10-10