Https-dns-proxy not working on latest snapshots/22.03.1

Thanks for posting the fix, it does seem to be very platform-dependent, I've never had a problem on x86_64.

There still seems to be something not right.

This morning I installed a fresh snapshot and https-dns-proxy. I noticed that opening some websites seemed stuck. In the log of the router these "nests" appear of stopping and starting http-dns-proxy/dnsmasq.

Wed Oct 19 11:59:01 2022 user.notice https-dns-proxy: Starting service ✓✓
Wed Oct 19 11:59:05 2022 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: started, version 2.86 cachesize 150
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: DNS service limited to local subnets
Wed Oct 19 11:59:09 2022 user.notice https-dns-proxy: Stopping service ✓
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for test
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for local
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask.icloud.com
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using 2 more local addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using nameserver xx.xxx.46.22#53
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using nameserver xx.xxx.46.23#53
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using nameserver xxxx:xxx:1002::10#53
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using nameserver xxxx:xxx:1202::10#53
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using nameserver xxxx:xxx:3e42:1000::53#53
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for test
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for local
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask.icloud.com
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: using 2 more local addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: read /etc/hosts - 4 addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 17 addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: read /tmp/hosts/odhcpd - 2 addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Wed Oct 19 11:59:09 2022 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: started, version 2.86 cachesize 150
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: DNS service limited to local subnets
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.1.100 -- 192.168.1.249, lease time 12h
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5054
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using nameserver 127.0.0.1#5053
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for test
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for local
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask-h2.icloud.com
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using only locally-known addresses for mask.icloud.com
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: using 2 more local addresses
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: read /etc/hosts - 4 addresses
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 17 addresses
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq[1]: read /tmp/hosts/odhcpd - 2 addresses
Wed Oct 19 11:59:13 2022 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Wed Oct 19 11:59:13 2022 user.notice https-dns-proxy: Starting service ✓✓

Agreed, I've done the fix suggested and although most stuff now works, some websites appear stuck and content embedded in emails won't load. I'm also getting this banner on MacOS and iOS mail apps "Your network preferences prevent content from loading privately":

PRs: https://github.com/openwrt/packages/pull/19633 https://github.com/openwrt/packages/pull/19634

2 Likes

So a WAN6 issue.
I temporarily disabled the WAN6 interface. Seems to help.

1 Like

The workaround I referenced is no longer needed with https-dns-proxy 2022-10-15-2 or newer (but won't hurt anything either).

If you use/want to use iCloud Private Relay (or whatever apple's built-in encrypted DNS is called) you may want to disable icloud canary domain setting.

None of the fixes worked on my 22.03.2 RT3200 until a clean install of https-dns-proxy - 2022-10-15-3 - this seems to be working well, thanks!

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.