DNS issues v7.1

[ptomjie]

Dear Mikrotik colleagues,

I used DNSPod DoH DNS in 7.1 on rb450gx4.
Both the free and Pro edition work fine for me with the standard configuration.
I can see in DNS logs “DoH server response not OK: 502: ” when I using Pro edition.
This log prints every minute.I think this is the ros os checking the availability of the server every minute.
I’m pretty sure my DoH server is fine. I’m not sure this is a problem. When I open the URL directly from my browser, I saw this:

Here is the dns log:

Here is the dns setting:

[Sob]

If server tells the truth, code 502 means that the server works as proxy and can’t reach backend server. And that would be server’s problem, not client’s.

[ptomjie]

If server tells the truth, code 502 means that the server works as proxy and can’t reach backend server. And that would be server’s problem, not client’s.

I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn’t lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.

[kerafyrm]

If server tells the truth, code 502 means that the server works as proxy and can’t reach backend server. And that would be server’s problem, not client’s.

I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn’t lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.

很明显，mikrotik 不支持doh pro

[own3r1138]

Hello, Did you try using some other DOH like Cloudflare to verify your setup is working fine?

[ptomjie]

I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn’t lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.

很明显，mikrotik 不支持doh pro

你好你好，偶遇国人，支持pro的只是日志有报错，联系过他们客服，后续pro不会再返回502了

[ptomjie]

Hello, Did you try using some other DOH like Cloudflare to verify your setup is working fine?

Thanks Guy! Cloudflare and alidns is working fine.
I just asked and got word they won’t be returing 502.

[own3r1138]

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don’t think it’s on your end.

[ptomjie]

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don’t think it’s on your end.

I just checked my NTP, I haven’t done any configuration before.
After enable NTP client, this log “DoH server connection error: Idle timeout - waiting data” disappeared

[own3r1138]

@ptomjie
I’m glad that I could help you <3.

[kenyloveg]

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don’t think it’s on your end.

For #3
Make sure your server address (/ip/dns/static) matches the fastest address searched your SSL by
https://search.censys.io/
https://myssl.com/