DNS: fix VLAN10 failover hairpin NAT, MikroTik AdGuard 0.107.79

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-10 20:40:10 +03:00
1 parent 6c6a251865
commit c1f607b9ef
@@ -8,6 +8,8 @@
 ### MikroTik: RouterOS 7.24.5 + Ookla speedtest container on hAP
 - **[NETWORK]** hAP ax³ and CAP AC on RouterOS 7.24.5. CAP XL ac is still on 7.23.3 (16 MB flash, may need netinstall).
 - **[NETWORK]** New on-demand container `speedtest` on the hAP (alpine + Ookla CLI 1.2.0 aarch64): veth-speedtest 172.17.0.4/24, gateway 172.17.0.1, /32 route, mount `/usb1/speedtest` → `/opt/st` (`run.sh` + cached binary). start-on-boot=no. Run: `/container start speedtest`; the result appears in `/log`.
+- **[DNS]** Fixed DNS failover for VLAN 10: added srcnat masquerade (UDP+TCP) `192.168.10.0/24 → 192.168.10.10:53` (comment `[DNS] VLAN10 hairpin to Unraid AdGuard (failover)`). Before this, VLAN 10 clients got no answer during failover, because Unraid replied directly from the same subnet. Verified with a real failover.
+- **[DNS]** MikroTik AdGuard v0.107.71 → v0.107.79 (container recreated from `adguard/adguardhome:latest`; config and stats live in the mounts and were kept). Config backup taken before the upgrade.
 - **[NETWORK]** Ookla baseline (Vivacom, Sofia servers): hAP 922/676 Mbit/s, Unraid 924/674 Mbit/s. TCP bandwidth-test hAP↔CAP: CAP XL 674/367, CAP AC 690/514 Mbit/s (limited by the CAP CPU). The Mac reaches only ~290 Mbit/s because its Realtek USB NIC runs at USB 2.0 behind the hub in the Dell monitor.

 ## 2026-10-10