Mikrotik devices are constantly connecting to cloud.mikrotik.com - what for?

RouterOS Beginner Basics
1

Hi,
Installed pi-hole yesterday to get some control on my home network traffic and I noticed that cloud.mikrotik.com is topping query list after one day. What happens there that all mikrotik devices are constantly connecting there?

I have 3 MT devices and pi-hole is running for like 16 hours, which gives us around 1k queries per device per day.
traffic.PNG

2

It is related to the cloud DNS…
The device checks according to the manual every 60 seconds for change in the public IP…

So if lets say it informs their server every 60 seconds then we have 60 queries per hour, 1440 in 24 hours per device…

3

And the rest of what cloud is doing like syncing the time. Disable all cloud requests and see what the result is.

/ip cloud

4

I found that on wiki when googled for cloud.mikrotik.com. I have “DDNS enabled” and “Update time” both unchecked on all three devices.

5

Try disabling Time Zone Autodetect if you haven’t already.


/system clock set time-zone-autodetect=no
6

You really don’t want your router to communicate with mikrotik ? Why? :laughing:

7

Didn’t say anything like that. I just like to know what is going on if I have such possibility.

8

Disabled it at night yesterday. Growth of requests at morning is still high.

9

Welcome to the Mikrotik botnet…
If you don’t like this “feature”, make sure internet interface detection, cloud and auto time sync and timezone are all disabled.
That fixed it for me, have blocking firewall rule and it’s been sitting there with 0 hits for months…

10

Yup, internet detection is what it was. Thanks!

11

mikrotik constantly send dns requests from port 5678
every 2 minutes

it was definitely detect internet feature.

:put [/interface detect-internet get detect-interface-list ]
static

mikrdns.PNG

12

I always recommend it be set to NONE. Does that have the same affect as OFF.

13

Is creating a firewall rule the canonical way to turn off internet detection? How do I do this? I’m not familiar how to stutter a firewall rule.

14

No, you just set the interfaces to none:
/interface detect-internet
set detect-interface-list=none internet-interface-list=none lan-interface-list=
none wan-interface-list=none