DNS issues v7.1

ptomjie · Thu Dec 16, 2021 4:14 pm

Dear Mikrotik colleagues,

I used DNSPod DoH DNS in 7.1 on rb450gx4.
Both the free and Pro edition work fine for me with the standard configuration.
I can see in DNS logs “DoH server response not OK: 502: <html>” when I using Pro edition.
This log prints every minute.I think this is the ros os checking the availability of the server every minute.
I'm pretty sure my DoH server is fine. I'm not sure this is a problem. When I open the URL directly from my browser, I saw this:

Snipaste_2021-12-16_22-06-03.jpg

Here is the dns log:

Snipaste_2021-12-16_22-10-53.jpg

Here is the dns setting:

Snipaste_2021-12-16_22-13-26.jpg

Sob · Thu Dec 16, 2021 6:46 pm

If server tells the truth, code 502 means that the server works as proxy and can't reach backend server. And that would be server's problem, not client's.

ptomjie · Fri Dec 17, 2021 4:00 am

If server tells the truth, code 502 means that the server works as proxy and can't reach backend server. And that would be server's problem, not client's.

I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn't lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.

kerafyrm · Mon Dec 20, 2021 7:23 am

If server tells the truth, code 502 means that the server works as proxy and can't reach backend server. And that would be server's problem, not client's.
I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn't lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.

很明显，mikrotik 不支持doh pro

own3r1138 · Mon Dec 20, 2021 8:54 am

Hello, Did you try using some other DOH like Cloudflare to verify your setup is working fine?

ptomjie · Mon Dec 20, 2021 4:28 pm

I think the server lied to protect user privac.
This Doh Server Pro edition can only be used by me.
If server doesn't lied, everyone might know the server url.
I think ros can use another way to check whether the doh server can be used.
很明显，mikrotik 不支持doh pro

你好你好，偶遇国人，支持pro的只是日志有报错，联系过他们客服，后续pro不会再返回502了

ptomjie · Mon Dec 20, 2021 4:33 pm

Hello, Did you try using some other DOH like Cloudflare to verify your setup is working fine?

Thanks Guy! Cloudflare and alidns is working fine.
I just asked and got word they won't be returing 502.

own3r1138 · Mon Dec 20, 2021 4:45 pm

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don't think it's on your end.

ptomjie · Tue Dec 21, 2021 4:26 am

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don't think it's on your end.

I just checked my NTP, I haven't done any configuration before.
After enable NTP client, this log "DoH server connection error: Idle timeout - waiting data" disappeared

own3r1138 · Tue Dec 21, 2021 8:11 am

@ptomjie
I'm glad that I could help you <3.

kenyloveg · Tue Dec 21, 2021 8:56 am

So if your Setup Is correct from the client side of DOH there are 3 things to check.
1 - Certificate
2 - NTP
3- DOH Server address
If none of the above then I don't think it's on your end.

For #3
Make sure your server address (/ip/dns/static) matches the fastest address searched your SSL by
https://search.censys.io/
https://myssl.com/

DNS issues v7.1

DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Re: DNS issues v7.1

Who is online