Periodic DNS query to "upgrade.mikrotik.com" (every 10 seconds)... bothering LTE modems to get and stay in IDLE mode.

RouterOS General
1

Hi.

It looks Mikrotik routers are doing a periodic DNS query to “upgrade.mikrotik.com” every ~10 seconds; it is the typical inactivity timer in eNB/gNB to place an 4G/5G modem in IDLE mode.

The result is the modem getting in IDLE a them back to CONNECTED every 10 seconds.

Any idea why there is this DNS query every 10 seconds? Any way to disable or configure it?

Stefano

[admin@MikroTik] > 
  (8 messages discarded)
16:46:06 echo: dns,packet id:af30 rd:1 tc:0 aa:0 qr:1 ra:1 QUERY 'no error'
16:46:06 echo: dns,packet question: upgrade.mikrotik.com:A:IN
16:46:06 echo: dns,packet answer:
16:46:06 echo: dns,packet <upgrade.mikrotik.com:CNAME:0=global-balancer-e.mikrotik.com>
16:46:06 echo: dns,packet <global-balancer-e.mikrotik.com:A:1608=159.148.147.251>
16:46:06 echo: dns done query: #2251 upgrade.mikrotik.com 159.148.147.251
16:46:06 echo: dns,packet --- sending reply to 10.101.0.1:11498:
16:46:06 echo: dns,packet id:3bcd rd:1 tc:0 aa:0 qr:1 ra:1 QUERY 'no error'
16:46:06 echo: dns,packet question: upgrade.mikrotik.com:A:IN
16:46:06 echo: dns,packet answer:
16:46:06 echo: dns,packet <upgrade.mikrotik.com:CNAME:0=global-balancer-e.mikrotik.com>
16:46:06 echo: dns,packet <global-balancer-e.mikrotik.com:A:3444=159.148.147.251>
[admin@MikroTik] > 
[admin@MikroTik] > 
  (8 messages discarded)
16:46:16 echo: dns,packet id:c0f rd:1 tc:0 aa:0 qr:1 ra:1 QUERY 'no error'
16:46:16 echo: dns,packet question: upgrade.mikrotik.com:A:IN
16:46:16 echo: dns,packet answer:
16:46:16 echo: dns,packet <upgrade.mikrotik.com:CNAME:0=global-balancer-e.mikrotik.com>
16:46:16 echo: dns,packet <global-balancer-e.mikrotik.com:A:2563=159.148.147.251>
16:46:16 echo: dns done query: #2252 upgrade.mikrotik.com 159.148.147.251
16:46:16 echo: dns,packet --- sending reply to 10.101.0.1:22662:
16:46:16 echo: dns,packet id:b9d0 rd:1 tc:0 aa:0 qr:1 ra:1 QUERY 'no error'
16:46:16 echo: dns,packet question: upgrade.mikrotik.com:A:IN
16:46:16 echo: dns,packet answer:
16:46:16 echo: dns,packet <upgrade.mikrotik.com:CNAME:0=global-balancer-e.mikrotik.com>
16:46:16 echo: dns,packet <global-balancer-e.mikrotik.com:A:3434=159.148.147.251>

5G_DNS_Wireshark_Trace.zip (2.85 KB)

2

Start by removing all options in “IP->Cloud”.

3

I got what it is happening: the first DNS query to “upgrade.mikrotik.com” happens when SW update check is done in System → Packages → Check for Updates. After this action, the periodic DNS query starts… until the router is restarted.

4

Yes, there is a bug there, but usually it does not no it every 10 seconds but rather every couple of hours.
Maybe 10 seconds while that check is still trying and has not yet displayed a fail message.

5

It could also be “detect internet” as that also pings upgrade.mikrotik.com.

6

Things that go bump …

  • check-gateway=ping ?
  • ip cloud time time updates?
  • ip cloud enabled checking in?
  • BTH noise?
  • NTP enabled noise?
  • any admin entered netwatch noise?
  • any admin entered script noise ( send email or other messages )?