OPNsense Forum

English Forums => General Discussion => Topic started by: Jyling on August 22, 2025, 10:10:05 PM

Title: Is DNS of open sense parallel?
Post by: Jyling on August 22, 2025, 10:10:05 PM
Does open sense query the configured DNS servers in parallel and return the 1st retrieved answer?
Title: Re: Is DNS of open sense parallel?
Post by: pfry on August 23, 2025, 06:24:45 AM
It appears to me the built-in client queries the servers one at a time, in order. That is, I just get one request, to the primary. (I didn't try setting a fake one to test failover.) The behavior may be configurable... but I prefer the default.
Title: Re: Is DNS of open sense parallel?
Post by: Jyling on August 23, 2025, 05:41:24 PM
How do you know that you get one request?

When I enter dns1, dns2, and dns3 where their response times are 100ms, 50ms, and 25ms, I get results in 25ms. This is only possible if the request is parallel or some logic tests them and prefers the fastest.
Title: Re: Is DNS of open sense parallel?
Post by: pfry on August 23, 2025, 06:04:45 PM
Quote from: Jyling on August 23, 2025, 05:41:24 PMHow do you know that you get one request? [...]

Firewall logs (I have logging enabled on all filters). In this case, the "let out anything from firewall host itself" rule.
Title: Re: Is DNS of open sense parallel?
Post by: Jyling on August 24, 2025, 04:58:44 PM
It is absolutely inexplicable how the resolution occurs quicker than the response time of the 1st, slow server. This does not make any sense.
Title: Re: Is DNS of open sense parallel?
Post by: Greg_E on August 26, 2025, 03:37:55 PM
Is it possible that whichever DNS service you are using goes out and queries the upstream providers, finds the fastest, and uses that one first for all future requests?

I do not see mine querying multiple servers either, but it does sometimes show switching between the two upstream servers.
Title: Re: Is DNS of open sense parallel?
Post by: Jyling on August 26, 2025, 03:51:44 PM
Not using the same name for testing.
Were the results cached, the response time would have been lower than the quickest, 3d server, but it is always equal to it.