OPNsense Forum

English Forums => General Discussion => Topic started by: fiR3W4LL87 on January 24, 2023, 09:03:10 PM

Title: Really slow Updates/Firmware
Post by: fiR3W4LL87 on January 24, 2023, 09:03:10 PM
Hi Guys

Has anyone else had this experience?

Every time I search for updates or a plugin, the search takes forever.

But as soon as the data is down, it goes much faster? What could be the cause of the behavior?

Regards

Title: Re: Really slow Updates/Firmware
Post by: lilsense on January 24, 2023, 09:40:15 PM
has to do with your DNS setup on the OPNsense.
Title: Re: Really slow Updates/Firmware
Post by: fiR3W4LL87 on January 24, 2023, 09:52:54 PM
Adguard?

The rest of the System works a charm and Adguard is since more or less one week on it.

How could i resolve it?
Title: Re: Really slow Updates/Firmware
Post by: Patrick M. Hausen on January 24, 2023, 09:57:10 PM
Enter a public DNS server, e.g. 1.1.1.1 in System > Settings > General, and try if that changes anything.

If it doesn't, try "Prefer IPv4 over IPv6" on the same page.
Title: Re: Really slow Updates/Firmware
Post by: fiR3W4LL87 on January 25, 2023, 11:17:29 PM
Hi pmhausen
It didnt help :(
Could be UFS the problem? Dont think so?!
Title: Re: Really slow Updates/Firmware
Post by: lilsense on January 26, 2023, 11:52:11 AM
from the shell/prompt of the OPNsense, can you ping 1.1.1.1 or 8.8.8.8 or 9.9.9.9?
Title: Re: Really slow Updates/Firmware
Post by: fiR3W4LL87 on January 26, 2023, 10:33:34 PM
Yes i can
Title: Re: Really slow Updates/Firmware
Post by: lilsense on January 27, 2023, 02:05:16 AM
Then try the command

host 1.1.1.1
1.1.1.1.in-addr.arpa domain name pointer one.one.one.one.
host 8.8.8.8
8.8.8.8.in-addr.arpa domain name pointer dns.google.

you should get something like that... if they work then you should try updating from console and see...
Title: Re: Really slow Updates/Firmware
Post by: Embroider5378 on March 22, 2023, 03:00:25 AM
I have Adguard on OPNSense and also had this issue.

To fix this, I set the DNS to a public resolver (Cloudflare) on System-->Settings-->General as suggested. However, that doesn't actually work unless you also check the box on the same page "Do not use the local DNS service as a nameserver for this system".
Title: Re: Really slow Updates/Firmware
Post by: fiR3W4LL87 on March 26, 2023, 11:49:39 PM
You are my Hero @Embroider5378
Now it is like day and night.
Thanks for your post.
Title: Re: Really slow Updates/Firmware
Post by: geotek on June 12, 2023, 11:24:34 AM
Quote from: Embroider5378 on March 22, 2023, 03:00:25 AM
I have Adguard on OPNSense and also had this issue.

To fix this, I set the DNS to a public resolver (Cloudflare) on System-->Settings-->General as suggested. However, that doesn't actually work unless you also check the box on the same page "Do not use the local DNS service as a nameserver for this system".

This solved the issue here too, but it is more of a workaround than a solution. The root cause for slow backups was an activated Unbound DNS service where no forwarding was enabled. I assume that this caused Unbound to use the root DNS servers, which explains the painfully slow update process.

So, a better solution would be to either disable Unbound DNS if not needed, or to check the box Services / Unbound DNS / Query Forwarding / "Use System Nameservers"
Title: Re: Really slow Updates/Firmware
Post by: Collapse4655 on December 08, 2023, 05:30:29 PM
Sorry for reviving a dead post.

I also agree that this is a workaround. For my current setup I require Adguardhome+Unbound So I have it set up so that AGH uses Unbound as upstream dns. I have DoT setup on Unbound so I can't use query forwarding to system nameservers in unbound.

Is there another way to get this setup to work without checking "Do not use the local DNS service as a nameserver for this system"?

The strange thing is that I had it working just fine, but had to change the boot drive. So I restored from backup and suddenly it doesn't work.
Title: Re: Really slow Updates/Firmware
Post by: Collapse4655 on December 08, 2023, 09:35:46 PM
Nevermind, I figured it out.
On the new install I had AGH listening only to LAN traffic. Reinstalled and let it listen to all interfaces, now it works like a charm.