DNS list priorities

[KYTECHNGAMING]

I use nextdns and cloudflare. Both of DNS entries are recorded in internet safety area. 

Using 2 DNS service, because one of them is not working or fail, following DNS's will work.  

DNS list appear as my recorded sequence. everything is right.

 

But in internet safty area, sorting a-z. oke no problem again. 

 

But nextdns is not working firstly.

 

If I remove CF, NextDNS is working.

[Le ecureuil]

Priority of DNS servers only depends of speed of answers from servers, not by order in config. So if CF answers first they always be used, and other will be only for fallback.

To clear any firther situation plz provide output of
> show dns-proxy
in cli. And I will explain how it works.

[KYTECHNGAMING]

  

23 minutes ago, Le ecureuil said:

Priority of DNS servers only depends of speed of answers from servers, not by order in config. So if CF answers first they always be used, and other will be only for fallback.

To clear any firther situation plz provide output of
> show dns-proxy
in cli. And I will explain how it works.

Spoiler

 

  

Edited April 3, 2021 by yerebakan

[KYTECHNGAMING]

I see 25ms instead of 2500ms. Really. is it NExtDns?

 

[Le ecureuil]

Fallback DNS very rarely used, so 2,5s is to create new TLS connection after it was expired.

As you can see only the lowest server is used, with average response time 62 ms and rank == 6.

[KYTECHNGAMING]

19 hours ago, Le ecureuil said:

Fallback DNS very rarely used, so 2,5s is to create new TLS connection after it was expired.

As you can see only the lowest server is used, with average response time 62 ms and rank == 6.

Thank you Sir. How to determine which 4050x is Cloudflare or NextDNS? 

[Le ecureuil]

I missed in your first post that you set plain unencrypted DNS.

They are totally disredarged when dot or doh are enabled, so all server on your pictures will not work at all.

And I can guess that you have CF dns filter enabled. So you will use only that DNS at all.

[KYTECHNGAMING]

9 hours ago, Le ecureuil said:

I missed in your first post that you set plain unencrypted DNS.

They are totally disredarged when dot or doh are enabled, so all server on your pictures will not work at all.

And I can guess that you have CF dns filter enabled. So you will use only that DNS at all.

I dont use pre-configured DNS Filter. (Internet safety is disable.)
 

Spoiler

Set manually DNS, DOT, DOH both nextdns and cloudflare in internet safety menu. 

Does this mean that the router dns,dot,doh use it after checking which one is fast?

If I have never set DNS and ignore DNS in PPPOE settings, can I get IP wtih dot or doh? 

 

[Le ecureuil]

В 05.04.2021 в 11:50, yerebakan сказал:

Set manually DNS, DOT, DOH both nextdns and cloudflare in internet safety menu. 

Does this mean that the router dns,dot,doh use it after checking which one is fast?

If I have never set DNS and ignore DNS in PPPOE settings, can I get IP wtih dot or doh? 

 

No, there is the set of hardcoded public dns resolvers for bootstrap. We use google, cf, quad9 as them.