@syhlx Everything is working well but now I’m seeing a new pihole NS entry in the logs.
checking the dnsmasq logs I get the below, anyway to block these?
dnsmasq[207]: query[NS] . from 172.30.32.1
dnsmasq[207]: forwarded . to 192.168.X.X
No worries, I share your frustation.
CPU & RAM, which is rather scarce as well. But, I did say it was a “crappy” solution (to a problem that should not exist in the first place…)
It is simply resquesting the list of Root Servers. Pretty much all DNS servers do this.
Short of out right blocking port 53 (DNS) with a firewall or pointing to a non-existing IP for your DNS, I don’t think you can prevent these requests with Dnsmasq or, by extension, Pi-Hole.
That’s odd I’ve never seen these type of entries in my pihole logs before. The fact that it just a period “.” is throwing me off.
I have ipv6 enabled, and it only seems to block the “internal” dnsmasq the ipv6 (AAAA) queries and the ipv4 (A) queries get through anyway, what should I change in the code to include those ipv6 queries too?
Dnsmasq config:
Pi-hole:
Update: I changed the network settings to my DHCP assigned HA IP address and now the queries are being blocked apart from the “.”. I don’t know what are those…
From Pi-hole:
From Dnsmasq:
Now this is my top domain haha a “dot”. Not funny at all Home Assistant supervisor programmers…This is certainly not a fix just a bad method to avoid your DATA COLLECTION!
the dot queries looks to be the internal ips of the docker containers from my understanding.
It seems this method is breaking some of my integrations, one of my cloud only light switches no longer work with this dnsmasq wok around.
I can accept an moderate usage of an online check - with Nabu Casa cloud account for all i care more often, but this is much to excessive:
2022-08-25 16:10:11 A android-context-data.googleapis.com android-d5c8598aa31d596b.fritz.box OK (answered by dns.opendns.com#53) IP (25.5ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:57 A app-prod-ws.warnwetter.de KIW-L21.fritz.box OK (answered by dns.opendns.com#53) IP (34.1ms)
2022-08-25 16:09:42 A google.com fritz.box OK (cache) IP (0.0ms)
2022-08-25 16:09:42 AAAA google.com fritz.box OK (answered by dns.opendns.com#53) IP (36.9ms)
2022-08-25 16:09:42 A google.com fritz.box OK (answered by dns.opendns.com#53) IP (46.4ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:09:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:09:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:08:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:08:28 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.1ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 AAAA checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
2022-08-25 16:07:58 A checkonline.home-assistant.io Nest.fritz.box Blocked (exact blacklist) IP (0.0ms)
At the moment the only way to strike back is to block that URL and whitelist it on the 2nd week a month to check for updates.
Sad, sad.
1 Like
Something else that you can do, is to disable IPv6 on your Pi.
It won’t magically make the problem disappear, but it lower the amount of DNS requests by more than half, with no side effect.
To do so:
On your Raspberry Pi’s SD Card, there is a file called “cmdline.txt”. It is on the first partition called “hassos-boot”.
Simply add “ipv6.disable=1” at the end of the line and save file. Do NOT change anything else in that file!
In the end the file should look something like this:
dwc_otg.lpm_enable=0 console=tty1 usb-storage.quirks=174c:55aa:u,2109:0715:u,152d:0578:u,152d:0579:u,152d:1561:u,174c:0829:u,14b0:0206:u,174c:55aa:u ipv6.disable=1
Again, it might be a bit different, just add a space and “ipv6.disable=1” at the end without changing the rest of the line.
Put the SD Card back in your Pi and plug it back in.
This will get rid of most of the AAAA queries (IPv6).
How can you reach this file if you are running a Virtual Machine (OVA) version of Home Assistant?
EDIT: found another solution without taking out the non existent SD card from the server, there is an option in the network settings to turn IPv6 off entirely.
1 Like
I decided to migrate my HASS OS to a single LXC container on Proxmox, with Node-Red and ZwaveJS2MQTT. Took my 2 hours to migrate everything, no more weird DNS lookups and I actually feel better about everything is compartmentalized now. Proxmox on ZFS provides snapshots, restoring backups is a breeze.
I’m certain not everyone will want to take this path, but in case you were thinking about it it’s pretty easy to achieve.
Oh man, things just get better and better and better.
With this most recent Supervisor update, I am now seeing tens of queries periodically for both . and checkonline.home-assistant.io
The best part is that I’ve not done any of the blocking that’s been talked about in this thread. The Supervisor just did this on its own! How wonderful~
What exactly has changed for you? I cannot see any remarkable difference since that Supervisor update.
What I mean is, I am seeing a set set of spammy requests.
Previously, I was only seeing the bursts of DNS requests for the updater/versioncheck/online checker domain. But with this update to the supervisor, my Pi-Hole and upstream DNS servers are being flooded with requests to resolve the domain . - which is wreaking havoc on how my resolvers are acting overall.
But long short, I am now seeing constant bursts of queries for both . and checkonline
I have never seen a bunch of requests for ., not sure what to make of that. Nothing was changed related to the online check for the latest supervisor (or for a while to my knowledge).
However due to this thread I did look into the swarms of checkonline queries. I was confused by this because supervisor actually only does a checkonline call every 10 minutes (or every 30 seconds if it believes your offline). When it does the check it does two things
- ask network manager to do a connectivity check to check the host (equivalent to running
nmcli networking connectivity checkin the host shell) - make one HEAD request to
checkonline.home-assistant.ioto ensure supervisor’s DNS is good
Yet I too was seeing like 50 DNS requests at the same second every 10 minutes to checkonline.home-assistant.io.
Turns out it is network manager. When I ran nmcli networking connectivity check directly I got the same thing. It seems like it checks every network interface individually, including all the veths made for docker containers. Each one gets an A and an AAAA query 
I don’t really know why it does this, it’s automated check doesn’t work like this. I did some investigation with @agners and we think it’s a bug fixed by this commit in an upcoming version of NM.
I changed supervisor to reduce this by not asking NM to run a check and instead just asking it for the latest result of its own automated check. Along with a few other improvements that should massively reduce this in the next version of supervisor
EDIT: Ok actually probably the version after the next one. Next one should be 2022.08.6 which was cut before the PR. The one after that will have it.
3 Likes
So after the after after after update it should be good, might be the next year eventually, but still OK. IDK how this bug was never identified in the first place, but thanks for fixing it @CentralCommand!
1 Like
Running Home Assistant 2022.9.1 and it seems to have reduced by half- down from somewaht over 2.700 to approx 1.400 per day
That makes sense. There’s two parts to this fix:
1 - Supervisor should stop doing so many connectivity checks
This is done as of 2022.09.1. Supervisor now makes a maximum of one single HEAD call to checkonline.home-assistant.io every 10 minutes as long as the last one succeeded. Note if you block checkonline.home-assistant.io or your network really is down then you will see more then this. But as long as things are going smoothly, this is the max.
Besides that it no longer forces Network Manager to run any checks automatically. It will force Network Manager to run a check if someone calls ha network reload or updates Network settings via supervisor but never on a schedule, manual intervention is required. Instead it lets Network Manager do its connectivity checks and simply checks the status of the last one. And I confirmed in testing that checking the status of Network Manager’s last connectivity check does not cause any HTTP calls.
2 - Update Network Manager
There’s still something wonky with how NM is doing connectivity checks in this version. It happens less with the automated checks but when I’m watching Network Manager’s debug logs its still happening.
If you are on HAOS then v9.0 includes an update to Network Manager that fixes this, I’m seeing a massive reduction there. If you are on a supervised install then you’ll have to do a similar update to Network Manager yourself if it is bothering you. There’s not really anything supervisor can do here, you have to update the host packages yourself.
1 Like
The resolver log of my firewall shows requests for checkonline.home-assistant.io. - about once every 2.5 minutes at occasions - 336 times in a day - so every 4’17" on average - and makes up about 5% of my logs.
version.home-assistant.io appears once every 2 hours - which is more reasonable.
The TTL for the domain is set to 5 minutes:
2024, this is still a problem, [checkonline.home-assistant.io] as been blocked in AdGuard.
My HA work offline 99.9%, i do not need those constant phone home calls.
This randomly started happening to me. I was LONG overdo for update, things seem fine, finally add HACS everything seems fine. then suddently phiole just flooded w/ ‘supervisor’