jazzymc/infrastructure
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DNS: add Cloudflare DoH + plain fallback upstreams to AdGuard

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Kaloyan DanchevandClaude Opus 5.5 committed 2026-10-10 21:02:04 +03:00
1 parent c1f607b9ef
commit 229077d586
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
docs/CHANGELOG.md
+1
View File
@@ -10,6 +10,7 @@
- **[NETWORK]** New on-demand container `speedtest` on the hAP (alpine + Ookla CLI 1.2.0 aarch64): veth-speedtest 172.17.0.4/24, gateway 172.17.0.1, /32 route, mount `/usb1/speedtest` → `/opt/st` (`run.sh` + cached binary). start-on-boot=no. Run: `/container start speedtest`; the result appears in `/log`. - **[NETWORK]** New on-demand container `speedtest` on the hAP (alpine + Ookla CLI 1.2.0 aarch64): veth-speedtest 172.17.0.4/24, gateway 172.17.0.1, /32 route, mount `/usb1/speedtest` → `/opt/st` (`run.sh` + cached binary). start-on-boot=no. Run: `/container start speedtest`; the result appears in `/log`.
- **[DNS]** Fixed DNS failover for VLAN 10: added srcnat masquerade (UDP+TCP) `192.168.10.0/24 → 192.168.10.10:53` (comment `[DNS] VLAN10 hairpin to Unraid AdGuard (failover)`). Before this, VLAN 10 clients got no answer during failover, because Unraid replied directly from the same subnet. Verified with a real failover. - **[DNS]** Fixed DNS failover for VLAN 10: added srcnat masquerade (UDP+TCP) `192.168.10.0/24 → 192.168.10.10:53` (comment `[DNS] VLAN10 hairpin to Unraid AdGuard (failover)`). Before this, VLAN 10 clients got no answer during failover, because Unraid replied directly from the same subnet. Verified with a real failover.
- **[DNS]** MikroTik AdGuard v0.107.71 → v0.107.79 (container recreated from `adguard/adguardhome:latest`; config and stats live in the mounts and were kept). Config backup taken before the upgrade. - **[DNS]** MikroTik AdGuard v0.107.71 → v0.107.79 (container recreated from `adguard/adguardhome:latest`; config and stats live in the mounts and were kept). Config backup taken before the upgrade.
- **[DNS]** AdGuard upstreams (both instances): Quad9 DoH + Cloudflare DoH (load balance), fallback 9.9.9.9 / 1.1.1.1, bootstrap + 1.1.1.1. Quad9 `unexpected EOF` errors went down from ~50 to 4 per 15 min, with 0 SERVFAIL. Note: `adguardhome-sync` syncs Unraid → MikroTik (Unraid is the source of truth).
- **[NETWORK]** Ookla baseline (Vivacom, Sofia servers): hAP 922/676 Mbit/s, Unraid 924/674 Mbit/s. TCP bandwidth-test hAP↔CAP: CAP XL 674/367, CAP AC 690/514 Mbit/s (limited by the CAP CPU). The Mac reaches only ~290 Mbit/s because its Realtek USB NIC runs at USB 2.0 behind the hub in the Dell monitor. - **[NETWORK]** Ookla baseline (Vivacom, Sofia servers): hAP 922/676 Mbit/s, Unraid 924/674 Mbit/s. TCP bandwidth-test hAP↔CAP: CAP XL 674/367, CAP AC 690/514 Mbit/s (limited by the CAP CPU). The Mac reaches only ~290 Mbit/s because its Realtek USB NIC runs at USB 2.0 behind the hub in the Dell monitor.
## 2026-10-10 ## 2026-10-10