Not too long ago, I got OPNSense setup and was able to replace my aging ASUS router. I've been happy overall, but overwhelmed at times. I've got AdGuard Home running for filtering/blocklists but recently enabled Unbound for another layer of privacy.
I knew going in that DNS lookups would be slow, but after ~48 hours, I think the performance is slower than what it should be. This is where I'm looking for input and advice. Perhaps I'm impatient and need to wait it out more to see if it normalizes.
AGH is reporting average processing times of ~200-300ms and ~500-700ms for upstream processing.
Unbound Statistics I think look good considering the amount of cold caches (see attached). But, at the same time I see recursive lookups of 2000-4000ms in Reports > Unbound.
AGH forwards everything to Unbound for DNS and Unbound is the only upstream server.
About the only things I changed within Unbound are:
Enabled Prefetch DNS Key Support, Hide Identity/Version, and enabled DNSSEC Support
DHCP is done via DNSMasq and not AGH.