Whats going on? unit queries google addresses multiple times per minute
-
I observe that the HD unit is requesting google dns (on static.com, google.net, google.org) at around every 15 seconds or so? What is this traffic, and why is it SO frequent?
-
@max-b: can you comment, @Andrejs-Hanins?
-
@ubnt-gunars said in Whats going on? unit queries google addresses multiple times per minute:
, @Andrejs-Hanins, , @Andrejs-Hanins
I have two mesh routers, one as mesh with a wired backbone. While monitoring my DNS server, I observed that both units are performing DNS queries with an interval of approx. 10/15 seconds for the mentioned domains. Is this behaviour correct, and if so, what is it for? If only to check if internet connection is working correctly... it doesn't really make sense to ping 3 different dns addresses all belonging to google, this often.
-
I second this request ... I have constant outbound connections in my logs coming from the Mesh Router with destinations at google.org, google.net and gstatic.com. This happens at least every 30 seconds. What's the purpose of this? I'm about to just block it, but would like to know the reason why it's doing it in the first place.
-
You are all right - these are DNS and HTTP queries used to diagnose Internet connection.
-
@andrejs-hanins doesn’t Google get enough data to analyse already?
-
@max-b Hi Max! What do you mean by that?
-
@max-b there is not much to analyze from those queries, as they don’t contain any unique information except the IP they came from. It’s just noise for google.
-
@max-b We use Google connectivity check servers to check Internet status from Amplifi side - to show you "No Internet" message when connection is down.
P.S. Android devices do the same.
@HTPC-Boosted ^^^
-
Apologies for the slightly cynical remark, apart from having very little control over the configuration, as I would love to see some ' enable advanced-mode ' to be able to tweak services like dhcp and firewall more, I do really love the product in it's current state.
However, I am concerned with privacy so discovering something this chatty to google only which, imho, does not really seem necessary (a simple ping to something like your ISP gateway, a DNS server, a speedtest server could be enough?) And why this frequent, and why on both mesh routers... or.. why login to the forums only through google or Facebook?
As such transparency would be nice: for me personally, the only viable reason an internal network device would actively seek contact to servers or hosts would be to check for firmware updates. Although the 'all is well' is a nice to have of course
-
@max-b ISP gateway may not respond to ICMP queries (ping) at all, so it's not a universal solution. Also we need to test Internet connection, not the ISP connection. Every AmpliFI router (even slave one) does this to make sure there are no problems in between main router and mesh points.
-
@dmitrijs-ivanovs I think what we're asking for is a way to either disable or change the frequency of those requests. It's a neat trick, but rather useless for those of us who have other means of telling if our connection is up. It really makes for a lot of noise in logfiles.