Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

When Pi-hole is down?

I have an asus router with a pi-hole on the network.

I was doing some work on my server and noticed that when pi-hole was down, I couldn't access the internet. I was looking for some ideas online how to deal with this, but they said to have a second pihole on the network in case one is offline. Is that the only way to do it? Is there any way to have the network go back to normal if the pihole is offline?

HybridSarcasm Mod ,
@HybridSarcasm@lemmy.world avatar

Add another DNS server (1.1.1.1, for instance) to your DHCP options. Your DHCP clients will use 1.1.1.1 when the pi-hole isn’t responsive.

Rooki ,
@Rooki@lemmy.world avatar

Does it really do that? I thought if pi-hole blocks it, it just says nothing here, normally a pc then looks up your secondary dns and then ads are back at it.

This was my experience when i did that.

HybridSarcasm Mod , (edited )
@HybridSarcasm@lemmy.world avatar

Yes, your experience will be different if your DNS is being provided by another kind of DNS resolver. If you want a consistent pi-hole experience (and you can’t avoid downtime of your current pi-hole), add another pi-hole to your network and let that be your secondary DNS resolver.

taladar ,

No, that is not how DNS blocking works. It doesn't just avoid responding, it responds but with a response that says that the domain does not exist or one that points to a different IP address.

1984 ,
@1984@lemmy.today avatar

Yeah this is the next best option, but a secondary pihole is the best, so you still get the dns blocking while the first one is down.

You listed cloudflare now (1.1.1.1) but I prefer https://www.quad9.net/ for the privacy and security.

AtariDump ,

When it comes to a “secondary”DNS... there is nothing like a primary and secondary DNS server. These indications are quite misleading but many systems adopted it this way. Pihole only list the DNS servers as primary and secondary, because this is what the providers write on their pages. The bad phrasing is supported especially by how Windows handles it.

Most operating systems implement DNS servers as alternatives, not as fallbacks, i.e. they will query any of both servers from time to time, so it is quite likely that you will loose your Pi-hole filtering capabilities (at least partially) [if you specify a secondary DNS server on your network].

The ONLY DNS server you should have set on your network is a/the PiHole(s).

1984 ,
@1984@lemmy.today avatar

Didn't know that, thanks for clarification!

Then I suggest two piholes. :)

hi_its_me ,

I don’t think this accomplishes what he wants. The router DHCP will assign the second DNS address as you mention, but the devices will select one at random, not as a backup/failover. So what happens is that devices sometimes go through the Pi-hole and sometimes go through the secondary DNS address and receive ads. The only real way I’m aware of is to have a second pi-hole for redundancy. Personally, I decided to use a cloud based service (NextDNS) for this exact reason. I didn’t want my families internet to rely on devices that I host.

machinin OP ,

How many queries a month do you have? I'm at 15 days and I'm already at 750K. Do you pay for your service? I can do that, just curious what is common.

BearOfaTime ,

I'm at 30k blocked per day, over 100k queries per day.

This on a small 2 user network, with a handful of machines, but a fucking Samsung TV. That goddamn thing constantly pings all sorts of shit.

If I really restrict it (breaking some stuff on the TV), I can get to 35% of queries blocked per day, mostly from it.

Though nominal blocking kills the ads on the menu system, pretty well, making it much more responsive.

hi_its_me ,

I’m not exactly sure how many queries, but it’s above the free limit. I purchased the pro plan. For $20 a year and it’s been a great service for me. I can send a referral code for 30% off (I think). I think adguard has a similar service.

magikmw ,

I think it depends. In my limited experience, because I have not tested this thoroughly, most systems pick the first DNS adresses and only send requests to the second if first doesn't respond.

This has lead at least a couple of times to extremely long timeouts making me think the system is unresponsive, especially with things like kerberos ssh login and such.

I personally set up my DHCP to provide pihole as primary, and my off site IPA master as secondary (so I still have internal split brain DNS working in case the entire VM host goes down).

Now I kinda want to test if that offsite DNS gets any requests in normal use. Maybe would explain some ad leaks on twitch.tv (likely twitch just using the same hosts for video and ads, but who knows).

Edit: If that is indeed the case, I'm not looking forward to maintaining another pihole offsite. Ehhh.

CurbsTickle ,

It is entirely the case.

DNS queries will go to all on the list, and use whatever responds first.

If you are seeing occasional ad leaks, this is why.

AtariDump ,

When it comes to a “secondary”DNS... there is nothing like a primary and secondary DNS server. These indications are quite misleading but many systems adopted it this way. Pihole only list the DNS servers as primary and secondary, because this is what the providers write on their pages. The bad phrasing is supported especially by how Windows handles it.

Most operating systems implement DNS servers as alternatives, not as fallbacks, i.e. they will query any of both servers from time to time, so it is quite likely that you will loose your Pi-hole filtering capabilities (at least partially) [if you specify a secondary DNS server on your network].

The ONLY DNS server you should have set on your network is a/the PiHole(s).

rambos ,

Wait, but then you cant tell if your device will use pihole even if its up. Afaik primary/secondary dns is not used in that order. I think best way is to set up 2nd pihole

atzanteol ,

They will also use 1.1.1.1 whenever they want. The order is not guaranteed.

Hosts also tend to use the same one for some time, so if your pihole went down clients may still favor 1.1.1.1 even after it comes back up.

AtariDump ,

When it comes to a “secondary”DNS... there is nothing like a primary and secondary DNS server. These indications are quite misleading but many systems adopted it this way. Pihole only list the DNS servers as primary and secondary, because this is what the providers write on their pages. The bad phrasing is supported especially by how Windows handles it.

Most operating systems implement DNS servers as alternatives, not as fallbacks, i.e. they will query any of both servers from time to time, so it is quite likely that you will loose your Pi-hole filtering capabilities (at least partially) [if you specify a secondary DNS server on your network].

The ONLY DNS server you should have set on your network is a/the PiHole(s).

HybridSarcasm Mod ,
@HybridSarcasm@lemmy.world avatar

Except when the ONLY pi-hole is down, which was the original OP’s whole question.

elDalvini ,

I have my pi-hole setup as the upstream DNS in my router, with cloudflare as a secondary DNS. That way, all my devices always use the router for DNS (since that's what is advertised in my DHCP) and the router then uses pi-hole if it's available, or cloudflare if it isn't. But the individual device doesn't get to choose between different servers.

taladar ,

The vast majority of devices that allow setting multiple DNS servers do not strictly prioritise one over the other even if they label it as primary and secondary.

elDalvini ,

That's why I don't let every device decide individually. I know my router (FritzBox) prioritizes the pi-hole (it's even called "preferred" and "alternative" DNS-Server in the UI)

taladar ,

Those labels are quite common too with systems that do not prioritize one over the other.

AtariDump ,

When it comes to a “secondary”DNS... there is nothing like a primary and secondary DNS server. These indications are quite misleading but many systems adopted it this way. Pihole only list the DNS servers as primary and secondary, because this is what the providers write on their pages. The bad phrasing is supported especially by how Windows handles it.

Most operating systems implement DNS servers as alternatives, not as fallbacks, i.e. they will query any of both servers from time to time, so it is quite likely that you will loose your Pi-hole filtering capabilities (at least partially) [if you specify a secondary DNS server on your network].

The ONLY DNS server you should have set on your network is a/the PiHole(s).

BearOfaTime ,

Umm, yea, if your DNS server is offline, how do your machines know how to resolve DNS names to IP addresses?

Which is why IP config has the capability for multiple DNS servers.

If this is surprising, you may wanna read up on your networking.

altima_neo ,
@altima_neo@lemmy.zip avatar

I think he realized that, he's looking for a solution though.

Sanguine ,

Why the extra snark? This person is asking a question. Easy to argue that he is trying to learn more about networking, why ostracize?

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

What are you asking? It sounds like you need some sort of HA (high availability)

Decronym Bot , (edited )

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
AP WiFi Access Point
DNS Domain Name Service/System
HA Home Assistant automation software
~ High Availability
IP Internet Protocol
LXC Linux Containers
PiHole Network-wide ad-blocker (DNS sinkhole)

6 acronyms in this thread; the most compressed thread commented on today has 3 acronyms.

[Thread for this sub, first seen 4th Feb 2024, 14:35]
[FAQ] [Full list] [Contact] [Source code]

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • selfhosted@lemmy.world
  • random
  • incremental_games
  • meta
  • All magazines
    •