ffries
1
Hello,
I am using NextDNS service behing a CCR2004 router.
This message comes every hour from my CCR2004.
Jun 21 01:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 01:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 02:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 02:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 03:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 03:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 04:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 04:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
I tried this, doubling figures of DNS DoH max queries :
I have no idea what figures to enter to raise the limit.
Kind regards,
French Fries
sas2k
2
Ros version?
Ttl for dns cache?
Hello, I have the same problem with Cloudflare Family. I get this message very frequently in logs.
DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
This is DNS Client config.
/ip dns
set allow-remote-requests=yes doh-max-concurrent-queries=10 doh-max-server-connections=10 doh-timeout=1h23m20s max-udp-packet-size=512 mdns-repeat-ifaces=bridge-lan \
servers=1.1.1.3,1.0.0.3 use-doh-server=https://family.cloudflare-dns.com/dns-query verify-doh-cert=yes
Routeros & Fw version are 7.17.2
Thanks
doh-timeout=1h23m20s ???
Who got up in the morning and wrote that b–t?
You wait 1 hour and more for a DoH reply?
Your ruouter act as DDoS server…
Default parameters:
address-list-extra-time=0s
allow-remote-requests=yes
cache-max-ttl=1w cache-size=2048KiB
doh-max-concurrent-queries=50 doh-max-server-connections=5
doh-timeout=5s
max-concurrent-queries=100 max-concurrent-tcp-sessions=20
max-udp-packet-size=4096
mdns-repeat-ifaces=""
query-server-timeout=2s query-total-timeout=10s
servers="" use-doh-server=""
verify-doh-cert=no vrf=main
LOL! For some strange reason, 5 secs got more zeros 5000.0 = 1h23m20s I didn't realize until you mentioned.
The DOH timeout shows in milliseconds in WinBox. Mine is also shows as 5.000 and is actually set to 5 seconds: doh-timeout: 5s
