macOS Roaming Client - Increased latency when on network that is using DNSFilter relay servers
Is there a way to configure the macOS Roaming Client so that it will revert to network DNS when connected to certain WAN IPs?
It seems to automatically detect my network that is running DNSFilter's relay servers. However, it adds increased latency. Some of the lookups for nslookup -type=TXT debug.dnsfilter.com approach 1800 ms. Websites also take a little bit longer to load.
After uninstalling the client, this reverted back to normal. All of the requests were handled by my DNS relay servers according to the query logs. So it is working as intended by reverting to the relay server, but it is adding latency.
-
Hi Eric Nix! A quick thing to check: do you currently have DNS-over-TLS (DoT) enabled? In some setups, using TLS with Relays can introduce extra latency due to routing, though it’s not common.
To test whether that’s the cause, try changing your upstream order to UDP first and see if the lookup times improve. If they do, that would point to TLS handling as the contributor.
If that ends up being the case, good news: version 2.3.9 includes improvements to TLS handling that should help reduce this kind of latency.
0 -
I am using DoT for the DNS relay server and I configured DoT for the roaming client.
I'll wait to see if 2.3.9 helps it. Hopefully it does because I would like for the roaming client to use DoT when away from my network.
0 -
BTW, Minetta Gould is there a way to install the beta?
0 -
Apologies Eric Nix , I was misinformed about the TLS work happening in v2.3.9—this work is focused on resiliency, but if the latency you're experiencing does resolve when testing the different upstream order, the fix to resolve that is a larger effort that will be part of our Roadmap. We don't have a version number for this specific work at this time, but can follow up once we have a version you can look out for!
As for beta agents, any beta is made available for download from the dashboard, just like Production versions. We announce them via in-app release notes, so keeping an eye on those notifications is the quickest way to know a new version is available to test.
0
Please sign in to leave a comment.
Comments
4 comments