TrueNAS SCALE querying DNS for “ix-truenas” and ix-truenas.local

[bzzjh]

The truenas scale I just installed today, I set up the adguardhome dns server for truenas scale, and I found that there are a lot of dns requests on the adguardhome's dashboard.

I found that the same issue is being discussed here：

Reddit

www.reddit.com

 

[jgreco]

The truenas scale I just installed today, I set up the adguardhome dns server for truenas scale, and I found that there are a lot of dns requests on the adguardhome's dashboard.

I found that the same issue is being discussed here：

Reddit

www.reddit.com

So you're running this under K8s on TrueNAS, and you're seeing what is apparently a normal K8s behaviour.

Have you tried telling Adguard to ignore it?

 

[anodos]

In nightlies I've enabled nscd for hosts so in theory you might see less of these requests (due to negative cache).

 

[ksimm1]

Reported the issue here previously and it went unresolved: https://jira.ixsystems.com/browse/NAS-114441

At the moment, i'm adding those to the host database field under networking as 127.0.0.1

 

[bzzjh]

Reported the issue here previously and it went unresolved: https://jira.ixsystems.com/browse/NAS-114441

At the moment, i'm adding those to the host database field under networking as 127.0.0.1

yes i modified the hosts file but truenas scale will restore /etc/hosts

 

[ksimm1]

yes i modified the hosts file but truenas scale will restore /etc/hosts

I meant adding it to the field under Network tab called Host Name Database. This will persist the value in /etc/hosts across system reboots

 

[bzzjh]

I meant adding it to the field under Network tab called Host Name Database. This will persist the value in /etc/hosts across system reboots
View attachment 54245

OK,thanks

 

[Codes]

In nightlies I've enabled nscd for hosts so in theory you might see less of these requests (due to negative cache).

This name is used in apps to get to the kube-api-server. On my machine ix-truenas was not resolvable for some reason, but adding it to the hostname list allowed me to get logs and shells again.

So the fact that this request is making it off the machine is a bug in that the machine has forgotten it's own host alias.

 

[K.J]

Some questions?

What is the point of installing adguard home on a truenas scale if it only displays some dns truenas notifications.

Surely the rest of your devices in your network can't connect to it.
Or is there a simple solution to this?

I ask this because I had it installed in truenas scale bluefin 22.12.0
By the way, this was very easy via the truecharts app.

Then installed and tested the firefox truecharts app to speed up dns requests.
In adguard no dns entry comes up after googling via firefox for a while.
Even not when YouTube is blocked in the list the site remains accessible and movies are playable.

 

[danb35]

Then installed and tested the firefox truecharts app to speed up dns requests.
In adguard no dns entry comes up after googling via firefox for a while.

I don't know about the TrueCharts app, but desktop Firefox defaults to DNS-over-HTTPS using Cloudflare's DNS servers--it wouldn't hit your Adguard installation.

 

[neofusion]

I don't know about the TrueCharts app, but desktop Firefox defaults to DNS-over-HTTPS using Cloudflare's DNS servers--it wouldn't hit your Adguard installation.

If your adblocker* is set up as DNS serving DoH for your local network Firefox should respect that and use your secured DNS instead of sidestepping it.

* I guess it depends on the adblocker, but at least Pihole should set it up properly.

 

[ChrisRJ]

I don't know about the TrueCharts app, but desktop Firefox defaults to DNS-over-HTTPS using Cloudflare's DNS servers--it wouldn't hit your Adguard installation.

This is not universally true. For me it is disabled by default and I seem to remember that it depends on your location (Germany in my case).

 

[nixgut]

I meant adding it to the field under Network tab called Host Name Database. This will persist the value in /etc/hosts across system reboots
View attachment 54245

Sorry, this is kind of old, but I just noticed that TrueNAS Scale is the most active DNS client on our LAN with these queries sending a new query every few seconds. Adding the entry above doesn't seem to make a difference.

 

[anodos]

Sorry, this is kind of old, but I just noticed that TrueNAS Scale is the most active DNS client on our LAN with these queries sending a new query every few seconds. Adding the entry above doesn't seem to make a difference.

This is because certain go applications were bypassing nscd and unfortunately designed to basically perform a nslookup on almost every op. Not a great design, but IIRC it should be passing through nscd in 22.12.1.

 

[nixgut]

This is because certain go applications were bypassing nscd and unfortunately designed to basically perform a nslookup on almost every op. Not a great design, but IIRC it should be passing through nscd in 22.12.1.

Thanks for the insight. I am running TrueNAS-SCALE-22.12.1 and it is still happening. It's purely running as a network file server for Win and Linux clients at this point. No apps, virtualization etc. Oh well...

 

[anodos]

Thanks for the insight. I am running TrueNAS-SCALE-22.12.1 and it is still happening. It's purely running as a network file server for Win and Linux clients at this point. No apps, virtualization etc. Oh well...

cloudsync tasks?

 

[nixgut]

cloudsync tasks?

Nope, just a pool of 2 mirrored drives as an SMB share (VM running on Hyper-V server).

 

[Vertex]

Sorry, this is kind of old, but I just noticed that TrueNAS Scale is the most active DNS client on our LAN with these queries sending a new query every few seconds. Adding the entry above doesn't seem to make a difference.

At the moment I cannot say whether this completely solves the problem, but I have added a second entry for IPv6:

EDIT: For me these entries solve the problem, there are no further entries in the AdGuard log. Thanks @ksimm1