DNS Lookup & Initial Connection Slow

[hemom]

Hi everyone,

My DNS Lookup & Initial Connections are very slow. Here is what I did: (Using Fedora Linux)

1. Install OpenWRT on my new router
2. Connect its WAN port to my ISP's router's LAN1 port
3. Connect my PC to the new router's LAN1 port
4. Changed password and disabled SSH in Luci

The problem begins here:
5) I look up some things on the chromium browser
This is very slow

PFA:

Monitoring with network page of dev ops in chromium shows the following for the "document" that is requested when a url is entered in bar or clicked in search engine (ignoring the ads and tracking links by the search engine, I am talking about here the "document" for getting the page such as "/page-index")

1. while it is loading:
   

   

2. When it has loaded, multiple samples:
   

Solutions I tried:

1. setting DNS manually in my network manager and browser to 1.1.1.1
2. setting DNS forward in luci to 1.1.1.1 as well and increasing DNS cache to max (10000)
3. rebooting several times

Why I think it is an OpenWRT issue:

1. keeping everything the same, if I now connect to a VPN wireguard config file in my net manager while staying on OpenWRT router fixes the problem
2. removing the OpenWRT router from the path, i.e. connecting the cable coming in to new router's WAN port from the LAN1 of ISP router now directly to the PC gives no such issues

Please help, any assistance is deeply appreciated!
Thank you!

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

[hemom]

I think these many samples should give a good idea. Please let me know if you would like any other info!

[fkl7834456]

Max. number of simultaneous requests 1000
DNS Query Cache size 3000
Minimum cache storage time 300
Maximum cache TTL 3600

[hemom]

Hi,

The issue is unfortunately still present.. and maybe worse as some take now 1 to 3 min for the "initial connection"

Thank you!

[fkl7834456]

I don't understand what you are talking about
but I can advise putting a package luci-app-https-dns-proxy

Then you can add to Sysctl

echo "net.ipv4.tcp_fastopen=3" > /etc/sysctl.conf

This will speed up dns connection via https

[hemom]

@fkl7834456

I don't understand what you are talking about

I am talking about the time taken for the initial connection as seen in the screenshots I shared above. (The screenshots are from inspect element > Network > the page request document)

@fkl7834456

but I can advise putting a package luci-app-https-dns-proxy

Okay, I will give it a try!

Thank you!

[fkl7834456]

I can add that you are testing incorrectly, your method of verification is complete nonsense

[hemom]

Testing what? how long it takes for the website to start loading? The method is exactly correct. I think you did not understand it.

Thank you!

[hemom]

@hemom

Okay, I will give it a try!

this did not help......

[dave14305]

What subnet is the ISP router using, compared to the OpenWrt router? You’ve added an extra hop to get the return traffic delivered to your clients. Does your ISP play any games to manipulate TTL on packets? Probably not, if they are just slow, but this isn’t going to be a DNS issue if subsequent IP connections are also slow.