From 16dce63ea4027390b152e7064b8b4e6bf1a18518 Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Mon, 1 Sep 2025 02:16:40 +0200 Subject: Fix wireguard_gateway role being slow The pihole lookup DNS queries when the VPN connection is up was slow. One of the culprits was the quad9 servers were taking long time when using VPN The other issue was the previous routing tables that used to work with the fritzbox (with DHCP) which wasn't fully working was conflicting with the VPN route tables and causing loops and delays. Now most of the VPN queries are working fast but some requests are taking some time, probably due to the VPN trying to check/block ads and malware! Also minor fixing to the pre tasks and documentation --- roles/network/templates/resolved.conf.j2 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'roles/network') diff --git a/roles/network/templates/resolved.conf.j2 b/roles/network/templates/resolved.conf.j2 index c083a214..cccffff1 100644 --- a/roles/network/templates/resolved.conf.j2 +++ b/roles/network/templates/resolved.conf.j2 @@ -1,6 +1,8 @@ [Resolve] -DNS=9.9.9.9 2620:fe::fe#quad9.net -FallbackDNS=1.1.1.1 2606:4700:4700::1111#cloudflare-dns.com 8.8.8.8 2001:4860:4860::8888#dns.google +# cloudflare-dns.com +DNS=1.1.1.1 2606:4700:4700::1111 +# dns.google +FallbackDNS=8.8.8.8 2001:4860:4860::8888 DNSSEC=yes DNSOverTLS=yes # use interface-specific DNS when available but fall back to global (required for VPN DNS to work) -- cgit v1.2.3