# Pings and some request to DNS

**URL:** <https://forum.alta.inc/t/pings-and-some-request-to-dns/1457>\
**Category:** Forum Feedback\
**Created:** [December 4, 2023, 5:10pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457 "2023-12-04T17:10:29Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 5:10pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/1 "2023-12-04T17:10:30Z")

</div>

Hi,

I’m using Adguard Home and I see this:

Ping.alta.inc **147.318** pings.

I see also some DNS providers:  
[doh.opendns.com](http://doh.opendns.com)  
dns.google

> **[1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver](https://one.one.one.one/dns/)**
>
> ✌️✌️ Browse a faster, more private internet.

Can you tell me why this is? I’m using Unbound and Adguard for my own DNS requests.  
I find a ping count of 147.000 a little high 🙂

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [December 4, 2023, 5:20pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/2 "2023-12-04T17:20:33Z")

</div>

This is basically the device(s) checking in. May I ask over what timeframe you’re seeing these nearly 150k pings?

Are you using any scheduling or guest portals on your network(s)?

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 5:22pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/3 "2023-12-04T17:22:19Z")

</div>

You may, no problem. One week.  
No scheduling or guest portals.

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 5:22pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/4 "2023-12-04T17:22:50Z")

</div>

DNS requests are also for checking in?

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [December 4, 2023, 5:29pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/5 "2023-12-04T17:29:38Z")

</div>

> [@BliXem](#):
>
> DNS requests are also for checking in?

No. Apologies for the confusion. The DNS queries could be attributed to the guest portal/scheduling as each has a web page hosted on the AP for dynamic DNS entries. The web pages are for the guest portal itself, or, in the case of scheduling, the page that would allow a client to request more time when the schedule has the network access turned off. This is moot since you’re not using either of these features, but that was the point of the question.

I’ll have to inquire with the devs as to why the DNS queries are present. Before I do, I just want to be 100% clear that you’re seeing these queries coming from the APs, is that correct?

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 5:34pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/6 "2023-12-04T17:34:52Z")

</div>

The DNS requests:  
[cloudflare-dns.com](http://cloudflare-dns.com) 15.079  
dns.google 15074  
[doh.opendns.com](http://doh.opendns.com) 15069

Well, if I see the requests it’s pointing to 192.168.0.1, that’s my OPNsense (firewall). But I force every DNS request to my Unbound which is running on a VPS within my network so I think it’s going to 192.168.0.1 after that. Before the AP’s I did not notice these requests.  
Is there something I can do to find out if they are from the APs? Got three of them and two Alta switches.

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 5:36pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/7 "2023-12-04T17:36:48Z")

</div>

![Schermafbeelding 2023-12-04 183614](https://forum.alta.inc/uploads/default/original/2X/9/913e316d6c9839d9199ada249925b047f0975a3f.png)  
192.168.0.3 is one of the AP’s btw.

I’ve got the manage.alta.inc tab always open in a pinned tab, maybe this is a reason why there are so many requests?

---

<div class="post-metadata">

**Author:** ![Alta-Matt\_v2](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-matt_v2/32/2456_2.png) [@Alta-Matt\_v2](https://forum.alta.inc/u/Alta-Matt_v2)\
**Post date:** [December 4, 2023, 5:48pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/8 "2023-12-04T17:48:19Z")

</div>

> [@BliXem](#):
>
> ![Schermafbeelding 2023-12-04 183614](https://forum.alta.inc/uploads/default/original/2X/9/913e316d6c9839d9199ada249925b047f0975a3f.png)  
> 192.168.0.3 is one of the AP’s btw.
> 
> I’ve got the manage.alta.inc tab always open in a pinned tab, maybe this is a reason why there are so many requests?

It could be, depending on what browser you’re using. I know Chrome has recently started…I don’t even know what to call it…“backgrounding”? “putting tabs to sleep”? In theory, if that’s happening, the tab shouldn’t be passing traffic. But regardless, the ping.alta.inc is checkin for the hardware itself, so the web browser should have nothing to do with that.

@Alta-Jeff can you shed some light on the DNS queries? Excluding the ping.alta.inc, of course.

---

<div class="post-metadata">

**Author:** ![Alta-Jeff](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-jeff/32/56_2.png) [@Alta-Jeff](https://forum.alta.inc/u/Alta-Jeff)\
**Post date:** [December 4, 2023, 6:11pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/9 "2023-12-04T18:11:33Z")

</div>

ping.alta.inc has a TTL of 3600 seconds, but the resource it points to, dl.alta.inc, has a TTL of 60 seconds because it is an alias to a CloudFront distribution.

It appears that the firmware currently prefers to use the latter TTL of 60 seconds, and because the firmware uses secure DNS, you will see DNS requests to the major DOH providers once per minute.

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 4, 2023, 6:15pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/10 "2023-12-04T18:15:44Z")

</div>

Yeah, I notice some weird stuff if I block those three DNS provider requests. But why do you choose for this option? Because I’m using my own DNS like Unbound and own lists for my privacy. I don’t want that DNS providers can check my DNS requests. Is there a way to turn this off?

---

<div class="post-metadata">

**Author:** ![pcAltuser](https://forum.alta.inc/user_avatar/forum.alta.inc/pcaltuser/32/2082_2.png) [@pcAltuser](https://forum.alta.inc/u/pcAltuser)\
**Post date:** [December 4, 2023, 11:18pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/11 "2023-12-04T23:18:03Z")

</div>

there is also a hit to [accounts.google.com](http://accounts.google.com) when you log in to the manage portal.

I do not use google sign in or apple sign in.

While there is a hit (and a cache hit) to [accounts.google.com](http://accounts.google.com) I don’t see any to the other sign in point.

Just seems an unnecessary call if you are not using it.

GET  
[https://accounts.google.com/gsi/client?onload=gapiLoaded](https://accounts.google.com/gsi/client?onload=gapiLoaded)

it was initiated from main.0868c308.js:4

There is also a JSON fetch to [sentry.io](http://sentry.io)

So when will the onPrem controller for us to use? This would reduce a lot of the external network calls from the access point.

---

<div class="post-metadata">

**Author:** ![Alta-Jeff](https://forum.alta.inc/user_avatar/forum.alta.inc/alta-jeff/32/56_2.png) [@Alta-Jeff](https://forum.alta.inc/u/Alta-Jeff)\
**Post date:** [December 5, 2023, 4:11pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/12 "2023-12-05T16:11:14Z")

</div>

@BliXem This secure DNS is used by the Alta firmware only – it does not interfere with the client DNS traffic at all. It is required for full Alta firmware functionality, in particular to work around LAN DNS servers that are (too) strict with DNS rebinding protection.

---

<div class="post-metadata">

**Author:** ![BliXem](https://forum.alta.inc/letter_avatar_proxy/v4/letter/b/e47774/32.png) [@BliXem](https://forum.alta.inc/u/BliXem)\
**Post date:** [December 5, 2023, 4:35pm UTC](https://forum.alta.inc/t/pings-and-some-request-to-dns/1457/13 "2023-12-05T16:35:37Z")

</div>

Alright, thanks for your clarifcation 🙂
