Unbound DNS keeps crashing every 2-3 mins.

[apoorv569]

I'm wondering that there are so many queries being made per second that upstream limits or times out or something

Two suggestions for you to check;

1 - OPNsense Web GUI: Do you have Traffic Reporting -> Traffic open, maybe in another tab, and if so close it.

2 - Open Interface -> Neighbors - Automatic Discovery and disable it if it's enabled.

It worked for a while but seems to be happening again.

Did you set up your environment as per these Configuration notes and the screen shots in this message as your starting point, before adding all the extras as per your original screen shots?

I can only suggest going back to basic rules to allow DNS to work properly from wherever before clamping down, as each rule applied to block DNS needs to be properly tested. Perhaps disable the DNS redirection for now and do this last, once everything else is working.

What does traffic reporting and neighbor discovery has to do with DNS? Genuinely curious.

[franco]

Where are the logs of Unbound crashing and is it a segfault or is it still running but not processing requests or is it exiting? I must be getting old.


Cheers,
Franco

[lmoore]

What does traffic reporting and neighbor discovery has to do with DNS

PTR queries.

I've just enabled Neighbour Discovery on my firewall but there aren't any PTR queries occurring. When this feature was first delivered I'm sure it was generating PTR queries.

If you open Traffic Reporting and click on the 'Top Talkers' tab you will see the list of hosts and their DNS names, assuming they could be resolved.