Jesper80
November 24, 2023, 10:49pm
1
My HA installation is using about 7mbit/s constantly, so I went into my pfsense firewall and did some packet captures and investigated a bit deeper with ntopng.
It is sending a massive amount of traffic to 1.1.1.1 on port 853 (DNS over TLS).
How do I find out what plugin or integration that is causing this?
I have already tried to go in and turn off all the add-ons one by one, but non of them seem to cause it. I could of course block the traffic in my firewall, but that wouldn’t really solve the problem.
Is there a command that I can run in terminal to find this out?
I don’t have an answer yet, I just installed HAOS and noticed this as well, this is from a fresh install so it’s something built-in.
Did you ever find an answer?
opened 10:27AM - 07 Aug 20 UTC
closed 02:02PM - 11 Aug 20 UTC
<!-- READ THIS FIRST:
- If you need additional help with this template, pleas… e refer to https://www.home-assistant.io/help/reporting_issues/
- Make sure you are running the latest version of Home Assistant before reporting an issue: https://github.com/home-assistant/core/releases
- Do not report issues for integrations if you are using custom components or integrations.
- Provide as many details as possible. Paste logs, configuration samples and code into the backticks.
DO NOT DELETE ANY TEXT from this template! Otherwise, your issue may be closed without comment.
-->
## The problem
I'm seeing regular (9/min) DoT DNS requests to 1.1.1.1 and 1.0.0.1 coming from my Home Asssitant instance
## Environment
Raspberry Pi 3B+
HassOS 4.110
Home Assistant 0.113.3
Supervisor 229
I have installed the following Ad-ons:
AdGuardHome
Check Home Assistant configuration
Duck DNS
File editor
Hass.io Google Drive Backup
Terminal & SSH
- Home Assistant Core release with the issue:
- Last working Home Assistant Core release (if known): Unknown
- Operating environment (OS/Container/Supervised/Core): HassOS 4.11
- Integration causing this issue: Unknown / poss AdGuard Home
- Link to integration documentation on our website:
## Problem-relevant `configuration.yaml`
```
~ $ ha dns info
host: 172.30.32.3
locals:
- dns://192.168.10.1
servers: []
version: "9"
version_latest: "9"
~ $
```
## Traceback/Error logs
No error logs`
## Additional information
If the core of HA is not doing this, then the only addon which I thought may be responsible is AdGuard Home, however my AdGuard Home is not setup to use upstream DoT and the servers 1.1.1.1 and 1.0.0.1 do not appear anywhere in the config.
I'm now blocking external 853 requests, so my router logs are full of this:
