Unbound DNS keeps crashing every 2-3 mins.

[apoorv569]

I'm wondering that there are so many queries being made per second that upstream limits or times out or something

Two suggestions for you to check;

1 - OPNsense Web GUI: Do you have Traffic Reporting -> Traffic open, maybe in another tab, and if so close it.

2 - Open Interface -> Neighbors - Automatic Discovery and disable it if it's enabled.

It worked for a while but seems to be happening again.

Did you set up your environment as per these Configuration notes and the screen shots in this message as your starting point, before adding all the extras as per your original screen shots?

I can only suggest going back to basic rules to allow DNS to work properly from wherever before clamping down, as each rule applied to block DNS needs to be properly tested. Perhaps disable the DNS redirection for now and do this last, once everything else is working.

What does traffic reporting and neighbor discovery has to do with DNS? Genuinely curious.

[franco]

Where are the logs of Unbound crashing and is it a segfault or is it still running but not processing requests or is it exiting? I must be getting old.


Cheers,
Franco

[lmoore]

What does traffic reporting and neighbor discovery has to do with DNS

PTR queries.

I've just enabled Neighbour Discovery on my firewall but there aren't any PTR queries occurring. When this feature was first delivered I'm sure it was generating PTR queries.

If you open Traffic Reporting and click on the 'Top Talkers' tab you will see the list of hosts and their DNS names, assuming they could be resolved.

[apoorv569]

I run a local proxmox server at home for self hosting various applications. And I have noticed this multiple times now, when I turn off my proxmox server for any reason, my Unbound server on OPNsense works fine with no issues. Like I have my server off for 2 days now, and I faced absolutely no issues, not a single time, but when I turn my server back on, it will eventually start to crash or whatever happens. I don't have the NAT rule, nor the floating rule and neither do I have the qname option turned on. At this point it has to be OPNsense that has a bug or my system running OPNsense is unable to processes that many queries, which I doubt, so it must be a bug from OPNsense side.

EDIT: My entire OPNsense box seems like crashed.. this is the second time it happened.. by crash I mean randomly disappears, I can't ping it, all links go down, the switch shows only yellow light no green..  I have a port on the OPNsense box for emergency situations and I could not get a shell or anything via that either, I had to hard reboot.. not implying that its happening because of Unbound BTW.