DoH max concurrent queries reached, ignoring query

ffries · Fri Jun 21, 2024 10:52 am

Hello,

I am using NextDNS service behing a CCR2004 router.

This message comes every hour from my CCR2004.

Jun 21 01:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 01:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 02:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 02:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 03:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 03:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]
Jun 21 04:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query
Jun 21 04:27:37 10.90.40.254 dns,warning ccr2004-1g-12s: DoH max concurrent queries reached, ignoring query [ignoring repeated messages]

I tried this, doubling figures of DNS DoH max queries :

Capture d’écran du 2024-06-21 09-55-13.png

I have no idea what figures to enter to raise the limit.

Kind regards,
French Fries

sas2k · Sat Jun 22, 2024 11:59 am

Ros version?
Ttl for dns cache?

HoracioDos · Tue Feb 11, 2025 4:12 pm

Hello, I have the same problem with Cloudflare Family. I get this message very frequently in logs.

DoH max concurrent queries reached, ignoring query [ignoring repeated messages]

This is DNS Client config.

/ip dns
set allow-remote-requests=yes doh-max-concurrent-queries=10 doh-max-server-connections=10 doh-timeout=1h23m20s max-udp-packet-size=512 mdns-repeat-ifaces=bridge-lan \
    servers=1.1.1.3,1.0.0.3 use-doh-server=https://family.cloudflare-dns.com/dns-query verify-doh-cert=yes

Routeros & Fw version are 7.17.2
Thanks

rextended · Tue Feb 11, 2025 4:36 pm

doh-timeout=1h23m20s ????????
Who got up in the morning and wrote that b–t?

You wait 1 hour and more for a DoH reply?
Your ruouter act as DDoS server...

Default parameters:

address-list-extra-time=0s
allow-remote-requests=yes
cache-max-ttl=1w cache-size=2048KiB
doh-max-concurrent-queries=50 doh-max-server-connections=5
doh-timeout=5s
max-concurrent-queries=100 max-concurrent-tcp-sessions=20
max-udp-packet-size=4096
mdns-repeat-ifaces=""
query-server-timeout=2s query-total-timeout=10s
servers="" use-doh-server=""
verify-doh-cert=no vrf=main

HoracioDos · Tue Feb 11, 2025 4:50 pm

doh-timeout=1h23m20s ????????
Who got up in the morning and wrote that b–t?

You wait 1 hour and more for a DoH reply?
Your ruouter act as DDoS server...

Default parameters:
Code: Select all
address-list-extra-time=0s
allow-remote-requests=yes
cache-max-ttl=1w cache-size=2048KiB
doh-max-concurrent-queries=50 doh-max-server-connections=5
doh-timeout=5s
max-concurrent-queries=100 max-concurrent-tcp-sessions=20
max-udp-packet-size=4096
mdns-repeat-ifaces=""
query-server-timeout=2s query-total-timeout=10s
servers="" use-doh-server=""
verify-doh-cert=no vrf=main

LOL! For some strange reason, 5 secs got more zeros 5000.0 = 1h23m20s I didn't realize until you mentioned.

mbovenka · Tue Feb 11, 2025 4:55 pm

doh-timeout=1h23m20s ????????
Who got up in the morning and wrote that b–t?

The DOH timeout shows in milliseconds in WinBox. Mine is also shows as 5.000 and is actually set to 5 seconds: doh-timeout: 5s

DoH max concurrent queries reached, ignoring query

DoH max concurrent queries reached, ignoring query

Re: DoH max concurrent queries reached, ignoring query

Re: DoH max concurrent queries reached, ignoring query

Re: DoH max concurrent queries reached, ignoring query

Re: DoH max concurrent queries reached, ignoring query

Re: DoH max concurrent queries reached, ignoring query