When this happens, can you ping something on the internet from LAN using ip address and not a dns name ?
If it works, it could be an issue on the dns side (not reachable or not answering)
post
The basic workflow of network troubleshooting is:
- Check if it's a DNS problem
- If not, check why it is a DNS problem anyway, but you failed to recognize it.
I mean, i have narrowed it down to some kind of DNS issue, I just don't know what. Right now everything is working again (I haven't changed anything), so I'll have to keep looking next time it stops working. It's just weird it works for days/weeks at a time, and then suddenly breaks for a few hours until it "magically" fixes it self again without me doing anything.
I'm not sure what you mean when you say that you're seeing "periodic drops". Like, you're sending pings from a wired-LAN device to somewhere on the Internet and not getting a response? Inbound TCP connections from the Internet aren't being forwarded to a device on the LAN?
Internet access from all devices in my house simply stops working entirely for a few hours, sometimes there's weeks between this happening, sometimes only a few days. But when this happens, I can still reach internet from my router without issue.
Does restarting your router help in these moments? Might just be an underpowered router
Do your devices use the router's DNS? If so is it still reachable? From the client? From the router machine?
Might be some kind of DHCP bug too but I'm not well versed in it
Restart doesn't fix it unfortunately.
I am using my routers DNS, and it's reachable from my laptop.
If you're using your router as DNS, it's using something else as DNS. Check those configs. One entry might be invalid or intermittently down. Try switching to another provider.
Also check that you're actually using the router as the DNS. When you do an nslookup you can specify DNS server. Next time you have the issue try
Nslookup example.com 9.9.9.9
If that replies then it's not a network issue it's your DNS config, either locally or on the router itself.
Okay. So, I don't know exactly what you're doing to test that, but I'm going to assume, say, trying to go somewhere in a Web browser.
First off, I have occasionally seen problems myself where consumer broadband routers that have been on for a long time wind up briefly becoming unresponsive. Probably some sort of memory leak or something. So if you haven't rebooted the thing and seen whether all your problems magically stop showing up, I'd probably try that. Quick and easy.
Okay. Say that doesn't do it.
When you confirm that the router can reach the Internet during this period of outage, how are you doing that? Going to a management Web UI from a wired-LAN device and trying to ping some host on the Internet?
When you confirm that the router can reach the Internet during this period of outage, how are you doing that?
it's a gl.inet brume2 running openwrt, I SSH into it and can ping outwards to anything and my speed test from the CLI tells me i have 900Mbit available
Ah, gotcha, cool. If it's OpenWrt and you have shell access, that should make it easier to diagnose. When you are checking that you don't have connectivity from your local LAN device, you tried pinging the same out-there-on-the-Internet host, and that failed?
Yes I use the same destination fro testing on my laptop and the router.
I think I've narrowed it down to a DNS issue, I just don't know exactly what. I can ping outwards from my laptop when using IPs but not names. But my laptop can reach my DNS.
For whatever reason ISPs tend (at least in here) to be pretty bad at keeping their DNS services up and running and that could cause issues you're having. Easy test is to switch your laptop DNS servers to cloudflare (1.1.1.1, 1.0.0.1) or opendns (208.67.222.222, 208.67.220.220) and see if the problem goes away. Or even faster by doing single queries from terminal, like 'dig a google.com @1.1.1.1'.
If that helps you can change your router WAN DNS server to something than what operator offers you via DHCP. I personally use opendns servers, but cloudflare or google (8.8.8.8, 8.8.4.4) are common pretty decent choices too.
How is your DNS configured / implemented?
Just default for my gl.inet, haven't changed anythingon that part.
Given that you're having issues with the DNS, I'd look at this.
Specifically, are you using the ISP DNS as an upstream lookup, or have you configured another DNS as the upstream?
Is the ISP DNS locking you out because you're hammering it?
Does the ISP block traffic on Port 53?
When you're having issues, can you look up addresses using a different DNS?
Lots of good suggestions here already but what is your upstream DNS provider and is it your ISP DNS from DHCP?
Sounds to me like your DNS on the router itself is crashing.
There's a couple of things you could do. Set up something like pihole or adguard home, and set the forwarding to something other than your internal DNS server.
Personally, I use AGH, and the default quad9 for forwarding all but my own domains. Those get handled by my OPNsense router's Unbound DNS and/or DNSMasq, depending on which domain (local or one of owned domains)
Everything other than those gets forwarded to quad9's public DoH service.
tl;dr:
If you think something is blocking DNS traffic, you could try configuring DNS-over-HTTPs or DNS- over- TLS and picking a reputable upstream. This should obfuscate the traffic somewhat and get past common DNS interference issues and tactics.
So building on what yourself and everyone else has said, it does seem to be a DNS issue.
I found that at select times my local ISP was up to shenanigans with DNS.
I live in a very small country and work in IT. The NOC for all three ISPs and I have met. It would surprise me if they were competent enough to do this intentionally for malicious purposes.
If you can get access out to the internet via ping, see if you can do other things - get on a VPS and test with tcpdump at both ends. There's a few free ones or trials great for disposable purposes like this. Set it up in advance...
You won't know what it is til you troubleshoot.
I've had huawei firewalls reaching some simultaneous connection limit and fail, reversing their ruleset - blocking everything except ICMP, tr069 and ssh (concerning) outbound...
I've had problems with specific DNS servers, through the ISP's network.
I've seen regular BGP changes causing outages all over the place (the ISPs locally don't peer with each other...)
Post your findings, would love to help/hear!
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| DHCP | Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network |
| DNS | Domain Name Service/System |
| HTTP | Hypertext Transfer Protocol, the Web |
| IP | Internet Protocol |
| SSH | Secure Shell for remote terminal access |
| SSL | Secure Sockets Layer, for transparent encryption |
| TCP | Transmission Control Protocol, most often over IP |
| TLS | Transport Layer Security, supersedes SSL |
| VPS | Virtual Private Server (opposed to shared hosting) |
[Thread #209 for this comm, first seen 3rd Apr 2026, 07:40] [FAQ] [Full list] [Contact] [Source code]
all 26 comments