AdGuard Home not receiving DNS queries when https-dns-proxy is enabled

rockla · December 11, 2025, 12:13pm

I have Adguardhome and httpsdnsproxy installed and expectation is

DNS from LAN clients should reach AdGuard Home so query logs show per-device traffic.

Whats happening:
When https-dns-proxy starts, dnsmasq upstreams change to 127.0.0.1#5053/5054, and AdGuard Home never receives queries.

Also im not sure whether i really need https dns proxy if im using DOH from cloudflare as dns server

How do I configure dnsmasq + https-dns-proxy + AdGuard Home so that AGH still logs client queries?
Is there a recommended architecture for running https-dns-proxy and AdGuard Home together?
Should dnsmasq forward to AGH or should AGH forward upstream to https-dns-proxy?



root@OpenWrt:~# uci show adguardhome
adguardhome.config=adguardhome
adguardhome.config.config='/etc/adguardhome.yaml'
adguardhome.config.workdir='/var/lib/adguardhome'
adguardhome.config.pidfile='/run/adguardhome.pid'
root@OpenWrt:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].cachesize='0'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].nonwildcard='1'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.@dnsmasq[0].filter_aaaa='0'
dhcp.@dnsmasq[0].filter_a='0'
dhcp.@dnsmasq[0].port='54'
dhcp.@dnsmasq[0].server='127.0.0.1#5054' '/mask.icloud.com/' '/mask-h2.icloud.com/' '/use-application-dns.net/' '127.0.0.1#5053'
dhcp.@dnsmasq[0].doh_backup_noresolv='-1'
dhcp.@dnsmasq[0].noresolv='1'
dhcp.@dnsmasq[0].doh_backup_server='127.0.0.1#5054' '/mask.icloud.com/' '/mask-h2.icloud.com/' '/use-application-dns.net/' '127.0.0.1#5053'
dhcp.@dnsmasq[0].doh_server='127.0.0.1#5053'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.dhcpv6='disabled'
dhcp.lan.ra='disabled'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ndp='disabled'
dhcp.lan.dhcp_option='3,192.168.1.1' '6,192.168.1.1' '15,lan'
dhcp.lan.dns=''
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.wan.dhcpv6='disabled'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.odhcpd.piofolder='/tmp/odhcpd-piofolder'
root@OpenWrt:~# netstat -nlp | grep -E "53|5053"
tcp        0      0 127.0.0.1:5053          0.0.0.0:*               LISTEN      3534/https-dns-prox
tcp        0      0 :::53                   :::*                    LISTEN      4176/AdGuardHome
tcp        0      0 :::853                  :::*                    LISTEN      4176/AdGuardHome
udp        0      0 127.0.0.1:5053          0.0.0.0:*                           3534/https-dns-prox
udp        0      0 192.168.1.1:5351        0.0.0.0:*                           3857/miniupnpd
udp        0      0 :::53                   :::*                                4176/AdGuardHome
udp        0      0 :::853                  :::*                                4176/AdGuardHome



Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.731724 [info] AdGuard Home, version 0.107.57
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.762514 [info] tls: using default ciphers
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.790676 [info] Initializing auth module: /tmp/lib/adguardhome/data/sessions.db
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.790792 [info] auth: initialized.  users:1  sessions:0
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.790908 [info] tls: number of certs: 1
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.813280 [info] webapi: initializing
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.814975 [info] dnsproxy: upstream mode is set mode=load_balance
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.815043 [info] dnsproxy: cache enabled size=4096
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.815095 [info] dnsproxy: max goroutines is set count=300
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.815981 [info] dnsproxy: ratelimit is enabled rps=20 ipv4_subnet_mask_len=24 ipv6_subnet_mask_len=56
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.816012 [info] dnsproxy: server will refuse requests of type any
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.816037 [info] dnsproxy: upstream mode is set mode=load_balance
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.816057 [info] dnsproxy: cache enabled size=2194304
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.816084 [info] dnsproxy: max goroutines is set count=300
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.816446 [info] addrproc: processing addresses
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.817328 [info] permcheck: warning: found unexpected permissions type=directory path=/tmp/lib/adguardhome perm=0755 want=0700
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.817423 [info] webapi: AdGuard Home is available at the following addresses:
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.817582 [info] go to https://192.168.1.1:4443
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.818191 [info] go to http://127.0.0.1:8888
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.818210 [info] go to http://[::1]:8888
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.818219 [info] go to http://[fe80::a4b7:caff:feab:7ab8%eth0]:8888
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.818228 [info] go to http://192.168.1.1:8888
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.818236 [info] go to http://172.31.15.212:8888
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822811 [info] dnsproxy: starting dns proxy server
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822851 [info] dnsproxy: creating udp server socket addr=0.0.0.0:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822923 [info] dnsproxy: listening to udp addr=[::]:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822937 [info] dnsproxy: creating tcp server socket addr=0.0.0.0:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822967 [info] dnsproxy: listening to tcp addr=[::]:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822975 [info] dnsproxy: creating tls server socket addr=0.0.0.0:853
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.822991 [info] dnsproxy: listening to tls addr=[::]:853
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823000 [info] dnsproxy: creating quic listener addr=0.0.0.0:853
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823185 [info] dnsproxy: listening quic addr=[::]:853
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823297 [info] dnsproxy: entering listener loop proto=tcp addr=[::]:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823297 [info] dnsproxy: entering udp listener loop addr=[::]:53
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823381 [info] dnsproxy: entering listener loop proto=tls addr=[::]:853
Thu Dec 11 16:38:30 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:30.823406 [info] dnsproxy: entering dns-over-quic listener loop addr=[::]:853
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.371968 [info] filtering: saving contents of filter 1763949738 into "/tmp/lib/adguardhome/data/filters/1763949738.txt"
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.372025 [info] filtering: updated filter 1763949738: 4476467 bytes, 203068 rules
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.378500 [info] filtering: saving contents of filter 1763949739 into "/tmp/lib/adguardhome/data/filters/1763949739.txt"
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.378544 [info] filtering: updated filter 1763949739: 68292 bytes, 1254 rules
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.410688 [info] filtering: saving contents of filter 1764226557 into "/tmp/lib/adguardhome/data/filters/1764226557.txt"
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.410733 [info] filtering: updated filter 1764226557: 338504 bytes, 15346 rules
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.457829 [info] filtering: saving contents of filter 1764226558 into "/tmp/lib/adguardhome/data/filters/1764226558.txt"
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.457878 [info] filtering: updated filter 1764226558: 662517 bytes, 20465 rules
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.467376 [info] filtering: saving contents of filter 1764226561 into "/tmp/lib/adguardhome/data/filters/1764226561.txt"
Thu Dec 11 16:38:37 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:37.467420 [info] filtering: updated filter 1764226561: 65050 bytes, 3169 rules
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.566546 [info] filtering: saving contents of filter 1764736687 into "/tmp/lib/adguardhome/data/filters/1764736687.txt"
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.566598 [info] filtering: updated filter 1764736687: 11238655 bytes, 621971 rules
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.570761 [info] filtering: saving contents of filter 1764736688 into "/tmp/lib/adguardhome/data/filters/1764736688.txt"
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.570807 [info] filtering: updated filter 1764736688: 8454 bytes, 473 rules
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575680 [info] filtering: saving contents of filter 1764736689 into "/tmp/lib/adguardhome/data/filters/1764736689.txt"
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575722 [info] filtering: updated filter 1764736689: 20274 bytes, 910 rules
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575731 [info] filtering: updated filter 1763949738; rule count: 203068 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575736 [info] filtering: updated filter 1763949739; rule count: 1254 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575740 [info] filtering: updated filter 1764226557; rule count: 15346 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575745 [info] filtering: updated filter 1764226558; rule count: 20465 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575749 [info] filtering: updated filter 1764226561; rule count: 3169 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575753 [info] filtering: updated filter 1764736687; rule count: 621971 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575757 [info] filtering: updated filter 1764736688; rule count: 473 (was 0)
Thu Dec 11 16:38:38 2025 daemon.err AdGuardHome[4176]: 2025/12/11 11:08:38.575761 [info] filtering: updated filter 1764736689; rule count: 910 (was 0)


root@OpenWrt:~# logread -e dnsmasq
Thu Dec 11 16:38:18 2025 user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses!
Thu Dec 11 16:38:18 2025 user.notice dnsmasq: Allowing 127.0.0.0/8 responses
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: started, version 2.90 cache disabled
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: DNS service limited to local subnets
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:18 2025 daemon.warn dnsmasq[1]: no servers found in /tmp/resolv.conf.d/resolv.conf.auto, will retry
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Thu Dec 11 16:38:18 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 0 names
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using nameserver 192.168.1.1#53
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:19 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: started, version 2.90 cache disabled
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: DNS service limited to local subnets
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using nameserver 192.168.1.1#53
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 2 names
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c.2143 - 0 names
Thu Dec 11 16:38:24 2025 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Thu Dec 11 16:38:26 2025 user.notice https-dns-proxy [2726]: Updating dnsmasq config ✓
Thu Dec 11 16:38:26 2025 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: started, version 2.90 cache disabled
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: DNS service limited to local subnets
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 192.168.1.1#53
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 2 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c.2653 - 0 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c.2845 - 0 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: started, version 2.90 cache disabled
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: DNS service limited to local subnets
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 2 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c.2845 - 0 names
Thu Dec 11 16:38:27 2025 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Thu Dec 11 16:38:29 2025 user.notice https-dns-proxy [2726]: Restarting dnsmasq on_config_update ✓
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq-dhcp[1]: DHCPDISCOVER(br-lan) 192.168.1.100 9c:c9:eb:19:72:96
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq-dhcp[1]: DHCPOFFER(br-lan) 192.168.1.100 9c:c9:eb:19:72:96
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: started, version 2.90 cache disabled
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: DNS service limited to local subnets
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for test
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for local
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for use-application-dns.net
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: using 2 more local addresses
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 2 names
Thu Dec 11 16:38:33 2025 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Thu Dec 11 16:38:39 2025 daemon.info dnsmasq-dhcp[1]: DHCPDISCOVER(br-lan) 192.168.1.100 9c:c9:eb:19:72:96

frollic · December 11, 2025, 12:24pm

don't force https-dns-proxy to use port 53
move dnsmasq listening port 53 to something else
use https-dns-proxy as upstream DNS for AGH

doesn't AGH support DoH or DoT out of the box ?

rockla · December 11, 2025, 12:27pm

Yes it does but i thought httpsdnsproxy is faster

egc · December 11, 2025, 1:17pm

I am personally not a big fan of Adguard, it is a resource hog/bloatware.
For secure DNS I use https-dns-proxy and for Adblocking we have several very nice adblock applications.

But Adguard has nice graphics and if you want to use Adguard do not use https-dns-proxy as Adguard has all you need for secure DNS

rockla · December 11, 2025, 1:18pm

Im running on nano pi r6c have enough ram to use and spare

frollic · December 11, 2025, 1:25pm

not defending AGH, it's bloadware, as @egc nicely put it, but have you bench marked it vs https-dns-proxy, or is it a gut feeling ?

rockla · December 11, 2025, 1:27pm

Its just a matter of convience with better hardware as it gives lot of out of the box and easy of management.

Im disabling https dns proxy now