Unbound DNS Failing to Use Domain Override

[anicoletti]

New to OPNsense and planning to move a lot of our customers over to this setup, but running into an issue with the Unbound DNS service that we need to get resolved before we can move forward.

What we're seeing is throughout the day, Unbound will no longer send any DNS requests to our domain override server over our IPSEC tunnel. The tunnel is still available and active as we can still ping and access those servers. We can also manually query the server directly and get DNS response. But if we query using Unbound, we get a "Server failed" response. Restarting the Unbound DNS service instantly resolves the issue.

We are currently running OPNsense 20.1.7-amd64 with dual WAN in a gateway group (tier 1 / 2 failover on member down). Any thoughts or suggestions?

[anicoletti]

Anyone have any thoughts on this issue? Happened again this morning and while bouncing the service is an easy fix, it's very inconvenient.