I can no longer run enrypted DNS using 4.8.3 on Opal. When I select Encrypted DNS, I get an error “Fetch Servers Failed.” This started on a new beta version of the firmware, but I’m not sure which one, and the error continues.
I have no understanding of why I can’t do this. I also want to use TLS to prevent MITM attacks by my ISP and have no way to confirm that isn’t happening.
I can SSH into the router. Do I need to delete something? Reinstall firmware?
Hi,
The “Fetch Servers Failed” message means that the Admin Panel was unable to retrieve the Encrypted DNS server list or configuration status from the router backend. This message does not necessarily mean that DNS over TLS is not working; it may also be a temporary Web UI or backend communication issue.
Please try to reboot the router, then return to NETWORK → DNS and check whether the error still appears.
After selecting Encrypted DNS → DNS over TLS → Cloudflare and applying the settings.
You can verify whether DNS over TLS is actually being used through a packet capture.
Please log in to the router through SSH. If tcpdump is not installed, run:
opkg update
opkg install tcpdump
Then start the packet capture with:
tcpdump -ni any 'host 1.1.1.1 and tcp port 853'
While the capture is running, perform a DNS lookup from a computer connected to the router:
nslookup example.com 192.168.8.1
If the router’s LAN IP has been changed, please replace 192.168.8.1 with the actual LAN IP address.
If the capture shows bidirectional traffic between the router and 1.1.1.1 on TCP port 853, this confirms that DNS over TLS is active.
For example:
router-WAN-IP.random-port > 1.1.1.1.853
1.1.1.1.853 > router-WAN-IP.random-port
If the error remains after rebooting, please do not reboot the router again immediately. Please export the system log and send it to us via private message, together with a screenshot of the DNS page and the packet-capture result.
