1

DoH max concurrent queries reached, ignoring query - DoH server connection error: Idle timeout - waiting data, DoH server connection error:

I have been experiencing several errors on MikroTik router RB5009 as shown in the attached photos. I have included my router DNS configuration if anyone is able to assist? 

36replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • Did you try increasing the “maximum concurrent queries” value? Any difference or is the current number the maximum allowed by the router?

    Like
      • Chris
      • Chris.20
      • 4 mths ago
      • Reported - view

      R P M hi mate, I have tried as suggested and the error disappear for a short while and re-appear again. 

      Like
  • Just noticed latest MikroTik version 7.8 introduce some DoH fix. Still not sure if the issue is MikroTik and NextDNS?

    Like 1
    • Chris Did you ever figure this out?

      Like
      • Chris
      • Chris.20
      • 1 mth ago
      • Reported - view

      Rob de Jonge Hi mate, nah. Still experiencing same issue and now when I am experiencing the timeout, webpages doesn't work. Thinking of switching to another provider :(

      Like
    • Chris You and me both. Just not sure where to! :)

      Like
    • Chris Same problem here.. Is it a known bug? working with other DoH-Providers (working without problems!) :-(

      Like
    • Chris ..and as a note: it was running for 2 weeks - untill I switch to the paid version today..

      Like
    • Chris What IP adresses are you using for "dns.nextdns.io"?

      Like 1
      • Chris
      • Chris.20
      • 1 mth ago
      • Reported - view

      Patrick De Zordo Hi Patrick, find the attached IP's below...

      Like
      • Chris
      • Chris.20
      • 1 mth ago
      • Reported - view

      Patrick De Zordo The same with me, all started when I switched to paid version.....

      Like
    • Chris from which country are you using nextdns?

      Like
      • Chris
      • Chris.20
      • 4 wk ago
      • Reported - view

      Patrick De Zordo Australia

      Like
    • Chris could you try the following IPs?

      207.148.84.39, 103.1.213.21 for dns.nextdns.io

      Like 1
      • Chris
      • Chris.20
      • 2 wk ago
      • Reported - view

      Patrick De Zordo Thanks Patrick, changed the IP as suggested. Will report back....

      Like
      • Chris
      • Chris.20
      • 2 wk ago
      • Reported - view

      Patrick De Zordo Still having issues as per the screenshot attached.  As highlighted in the screenshot, MikroTik version 7.9 introduced new features in the DNS settings...... any idea/suggestions of the optimal values??

      Like
    • Chris we are using the following settings, and we get just 1-5 timouts a day..

      it's not perfect, but "ok" for now..

      Like 1
      • Chris
      • Chris.20
      • 12 days ago
      • 1
      • Reported - view

      Patrick De Zordo Made the changes and timeout increased....... not sure what more I can do

      Like 1
      • Anh Vu
      • Anh_Vu
      • 11 days ago
      • 1
      • Reported - view

      Chris  same issued at Viet Nam, did nextdns change something?

      Like 1
      • Chris
      • Chris.20
      • 11 days ago
      • 1
      • Reported - view

      Anh Vu Hey mate, not sure what NEXTDNS did but it has been a nightmare since the error started filing up log file. To make it worse, this is a paid version and nothing official from NEXTDNS staff!!!

      Like 1
      • Anh Vu
      • Anh_Vu
      • 10 days ago
      • 2
      • Reported - view

      Chris  

      Today, I found reason to make nextdns timeout by enable rule dns in logging. So some device in my home network was tried to connect from their server like bitcoin from china and hongkong. Then I create rule to drop connection from list in firewall then connection timeout reduced.

      I'm not good at English, so I hope you guys understand.

      Like 2
    • Anh Vu yeah, we understand! 👍

      Since yesterday we are using "ultralow1" and "ultralow2" server IPs for "dns.nextdns.io".

      Here in Italy the 2 IPs we are using: 178.255.155.63 and 192.145.127.148 - for now we have had 12 hours without any "timeout" or "connection error". (ROS 7.9 on x86)

      Can you check your "utlralow" servers in your country by opening the following page please?

      https://ping.nextdns.io/

      Like 1
      • Chris
      • Chris.20
      • 10 days ago
      • Reported - view

      Patrick De Zordo how did you obtain IP addresses for "ultralow1/2"? I have attached screenshot from ping.nextdns.io

      Like
      • Chris
      • Chris.20
      • 10 days ago
      • Reported - view

      Anh Vu Nice work mate. Anh Vu I have enable DNS logging and I can only see private IP's and not public IP on my list which if blocked the router would break 

      Like
    • Chris it (should) be documented somewhere; can't find it right now, but it's really simple:

      ultralow1=gsl-adl this will become ipv4-gsl-adl-1.edge.nextdns.io => 116.90.72.196

      ultralow2=zetta-adl this will become ipv4-zetta-adl-1.edge.nextdns.io => 119.252.93.133

      So just use the 2 IPs for 2 static DNS records for "dns.nextdns.io",  and configure DNS parameters as in my screenshots.

      Then try to observe if it is working better..? 😉

      Like 1
      • Anh Vu
      • Anh_Vu
      • 9 days ago
      • 1
      • Reported - view

      Patrick De Zordo you guys can get IP for ultralow and other servers from this site: http://router.nextdns.io/?limit=20&stack=dual

      Like 1
      • Anh Vu
      • Anh_Vu
      • 9 days ago
      • 1
      • Reported - view

      Chris this can be DoH issued on your mikrotik. This certificate's broken. You can try to delete it from System > Certificates.

       

       

      Also, no more DoH issues on my home network since I blocked all unauthorized IPs from China and HongKong. I'm very happy now :)

       

       

       

      I'm using 2 ultralow server and zepto-sin

       

      My dns settings

       

      Like 1
    • Anh Vu Thanks, didn't know this.. 😉

      Like 1
      • Chris
      • Chris.20
      • 8 days ago
      • 1
      • Reported - view

      Patrick De Zordo Legend! I have set those IP's now and will report back. Thanks mate.....

      Like 1
    • Chris Nice! 😉 don't forget to set this values mate..

      Like 1
      • Chris
      • Chris.20
      • 8 days ago
      • 1
      • Reported - view

      Anh Vu Nice one mate. 

      Like 1
      • Chris
      • Chris.20
      • 8 days ago
      • 2
      • Reported - view

      Patrick De Zordo Have set them now. Great to see community (You and @Ann Vu) helping to resolve the issue 👍.... one wonders if NEXTDNS support even exist 🤐!!!

      Like 2
  • It's really frustrating.. we are now also (again) having outages.. 🤔

    Why ist no NextDNS Staff reading this posts? 😥

    Actually trying with this settings, and it's "better" than before, but not good at all...

    RouterOS 7.9

    Like
      • Chris
      • Chris.20
      • 11 days ago
      • 1
      • Reported - view

      Patrick De Zordo I agree mate, NEXTDNS staff MUST do better.......this has been an issue for a while yet nothing from the company!!!! Yet it's paid version, go figure!

      Like 1


  • Configs: ip dns pr
    servers:
    dynamic-servers:
    use-doh-server: https://dns.google/dns-query
    verify-doh-cert: yes
    allow-remote-requests: yes
    max-udp-packet-size: 50000
    query-server-timeout: 2s
    query-total-timeout: 10s
    max-concurrent-queries: 1048576
    max-concurrent-tcp-sessions: 1000000
    cache-size: 1953163KiB
    cache-max-ttl: 1w
    cache-used: 22294KiB

    Like
      • Chris
      • Chris.20
      • 8 days ago
      • Reported - view

      Ronnie Barnett Gidday mate, does NEXTDNS support the use of Google DNS DOH servers?  How about certificates, are they included by default on MikroTik routers?

      Like
Like1 Follow
  • 1 Likes
  • 8 days agoLast active
  • 36Replies
  • 643Views
  • 5 Following