No. Apologies for the confusion. The DNS queries could be attributed to the guest portal/scheduling as each has a web page hosted on the AP for dynamic DNS entries. The web pages are for the guest portal itself, or, in the case of scheduling, the page that would allow a client to request more time when the schedule has the network access turned off. This is moot since you’re not using either of these features, but that was the point of the question.
I’ll have to inquire with the devs as to why the DNS queries are present. Before I do, I just want to be 100% clear that you’re seeing these queries coming from the APs, is that correct?
Well, if I see the requests it’s pointing to 192.168.0.1, that’s my OPNsense (firewall). But I force every DNS request to my Unbound which is running on a VPS within my network so I think it’s going to 192.168.0.1 after that. Before the AP’s I did not notice these requests.
Is there something I can do to find out if they are from the APs? Got three of them and two Alta switches.
It could be, depending on what browser you’re using. I know Chrome has recently started…I don’t even know what to call it…“backgrounding”? “putting tabs to sleep”? In theory, if that’s happening, the tab shouldn’t be passing traffic. But regardless, the ping.alta.inc is checkin for the hardware itself, so the web browser should have nothing to do with that.
@Alta-Jeff can you shed some light on the DNS queries? Excluding the ping.alta.inc, of course.
ping.alta.inc has a TTL of 3600 seconds, but the resource it points to, dl.alta.inc, has a TTL of 60 seconds because it is an alias to a CloudFront distribution.
It appears that the firmware currently prefers to use the latter TTL of 60 seconds, and because the firmware uses secure DNS, you will see DNS requests to the major DOH providers once per minute.
Yeah, I notice some weird stuff if I block those three DNS provider requests. But why do you choose for this option? Because I’m using my own DNS like Unbound and own lists for my privacy. I don’t want that DNS providers can check my DNS requests. Is there a way to turn this off?
@BliXem This secure DNS is used by the Alta firmware only – it does not interfere with the client DNS traffic at all. It is required for full Alta firmware functionality, in particular to work around LAN DNS servers that are (too) strict with DNS rebinding protection.