From c1f607b9ef6326fe3e8e386cf29c40cdacd0b7b0 Mon Sep 17 00:00:00 2001 From: Kaloyan Danchev Date: Sat, 10 Oct 2026 20:40:10 +0300 Subject: [PATCH] DNS: fix VLAN10 failover hairpin NAT, MikroTik AdGuard 0.107.79 Co-Authored-By: Claude Opus 5.5 --- docs/CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index afe052c..6a6fe35 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -8,6 +8,8 @@ ### MikroTik: RouterOS 7.24.5 + Ookla speedtest container on hAP - **[NETWORK]** hAP ax³ and CAP AC on RouterOS 7.24.5. CAP XL ac is still on 7.23.3 (16 MB flash, may need netinstall). - **[NETWORK]** New on-demand container `speedtest` on the hAP (alpine + Ookla CLI 1.2.0 aarch64): veth-speedtest 172.17.0.4/24, gateway 172.17.0.1, /32 route, mount `/usb1/speedtest` → `/opt/st` (`run.sh` + cached binary). start-on-boot=no. Run: `/container start speedtest`; the result appears in `/log`. +- **[DNS]** Fixed DNS failover for VLAN 10: added srcnat masquerade (UDP+TCP) `192.168.10.0/24 → 192.168.10.10:53` (comment `[DNS] VLAN10 hairpin to Unraid AdGuard (failover)`). Before this, VLAN 10 clients got no answer during failover, because Unraid replied directly from the same subnet. Verified with a real failover. +- **[DNS]** MikroTik AdGuard v0.107.71 → v0.107.79 (container recreated from `adguard/adguardhome:latest`; config and stats live in the mounts and were kept). Config backup taken before the upgrade. - **[NETWORK]** Ookla baseline (Vivacom, Sofia servers): hAP 922/676 Mbit/s, Unraid 924/674 Mbit/s. TCP bandwidth-test hAP↔CAP: CAP XL 674/367, CAP AC 690/514 Mbit/s (limited by the CAP CPU). The Mac reaches only ~290 Mbit/s because its Realtek USB NIC runs at USB 2.0 behind the hub in the Dell monitor. ## 2026-10-10