DoT/DoQ vs DoH/3: added 10-15 ms latency with DoT/DoQ

[ericnixmd]

I run ctrld on a Raspberry Pi as a DNS relay server.

Using DoT or DoQ, it adds about 10-15 ms of latency when compared to plain tcp/udp lookups. Much more than I thought it would add. DoQ may shave off 1-2 ms when compared to DoT. Subsequent queries during the cache period of the relay is 2-3 ms response times usually.

DoH/3 seems to only add 1-3 ms of latency at most.

Is there some issue with DoQ or DoT with ctrld CLI or is this expected latency ranges for DoT/DoQ vs DoH/3? I wouldn't think DoH/3 would be that much faster than DoQ/DoT, but could be easily mistaken. Also, when running tests on dnscheck.tools, DoH/3 usually results in 12-18 ms reported whereas DoT/DoQ reports anywhere from 30-55 ms.

[ericnixmd]

I changed one DNS relay to DoH/3 and left the other DoQ. The relay server using DoQ seems to be about 10 ms slower than the one using DoH/3.

10.0.1.101 was using DoH/3. 10.0.1.102 was using DoQ.

ericnix@Erics-Mac-Studio ~ % dig google.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> google.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4287
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com.			IN	A

;; ANSWER SECTION:
google.com.		300	IN	A	142.250.9.139
google.com.		300	IN	A	142.250.9.113
google.com.		300	IN	A	142.250.9.102
google.com.		300	IN	A	142.250.9.101
google.com.		300	IN	A	142.250.9.100
google.com.		300	IN	A	142.250.9.138

;; Query time: 18 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:49 EST 2026
;; MSG SIZE  rcvd: 135

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 33988
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 4 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:49 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig google.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> google.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35459
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com.			IN	A

;; ANSWER SECTION:
google.com.		296	IN	A	142.250.9.139
google.com.		296	IN	A	142.250.9.113
google.com.		296	IN	A	142.250.9.102
google.com.		296	IN	A	142.250.9.101
google.com.		296	IN	A	142.250.9.100
google.com.		296	IN	A	142.250.9.138

;; Query time: 3 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:53 EST 2026
;; MSG SIZE  rcvd: 135

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 23094
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:53 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig bankofamerica.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> bankofamerica.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29012
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;bankofamerica.com.		IN	A

;; ANSWER SECTION:
bankofamerica.com.	300	IN	A	3.173.22.90
bankofamerica.com.	300	IN	A	3.173.21.90
bankofamerica.com.	300	IN	A	3.173.23.90

;; Query time: 6 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:59 EST 2026
;; MSG SIZE  rcvd: 94

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 42365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:50:59 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig bankofamerica.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> bankofamerica.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56561
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;bankofamerica.com.		IN	A

;; ANSWER SECTION:
bankofamerica.com.	294	IN	A	3.173.22.90
bankofamerica.com.	294	IN	A	3.173.21.90
bankofamerica.com.	294	IN	A	3.173.23.90

;; Query time: 2 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:05 EST 2026
;; MSG SIZE  rcvd: 94

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 61206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 16 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:05 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig fidelity.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> fidelity.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57811
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;fidelity.com.			IN	A

;; ANSWER SECTION:
fidelity.com.		300	IN	A	99.83.221.176
fidelity.com.		300	IN	A	75.2.43.78

;; Query time: 19 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:12 EST 2026
;; MSG SIZE  rcvd: 73

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 22318
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:12 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig fidelity.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> fidelity.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13889
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;fidelity.com.			IN	A

;; ANSWER SECTION:
fidelity.com.		294	IN	A	99.83.221.176
fidelity.com.		294	IN	A	75.2.43.78

;; Query time: 13 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:18 EST 2026
;; MSG SIZE  rcvd: 73

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 63911
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 17 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:18 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig arstechnica.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> arstechnica.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17334
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;arstechnica.com.		IN	A

;; ANSWER SECTION:
arstechnica.com.	300	IN	A	3.137.47.108
arstechnica.com.	300	IN	A	3.23.109.44

;; Query time: 54 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:29 EST 2026
;; MSG SIZE  rcvd: 76

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 9374
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 4 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:29 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig arstechnica.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> arstechnica.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63648
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;arstechnica.com.		IN	A

;; ANSWER SECTION:
arstechnica.com.	294	IN	A	3.137.47.108
arstechnica.com.	294	IN	A	3.23.109.44

;; Query time: 3 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:35 EST 2026
;; MSG SIZE  rcvd: 76

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 11269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 16 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:35 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig macrumors.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> macrumors.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21237
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;macrumors.com.			IN	A

;; ANSWER SECTION:
macrumors.com.		300	IN	A	172.66.148.112
macrumors.com.		300	IN	A	104.20.35.133

;; Query time: 26 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:42 EST 2026
;; MSG SIZE  rcvd: 74

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 4045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:42 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig macrumors.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> macrumors.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15402
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;macrumors.com.			IN	A

;; ANSWER SECTION:
macrumors.com.		295	IN	A	172.66.148.112
macrumors.com.		295	IN	A	104.20.35.133

;; Query time: 2 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:46 EST 2026
;; MSG SIZE  rcvd: 74

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 36151
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 4 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:46 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig bbc.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> bbc.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49607
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;bbc.com.			IN	A

;; ANSWER SECTION:
bbc.com.		300	IN	A	151.101.0.81
bbc.com.		300	IN	A	151.101.192.81
bbc.com.		300	IN	A	151.101.128.81
bbc.com.		300	IN	A	151.101.64.81

;; Query time: 104 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:58 EST 2026
;; MSG SIZE  rcvd: 100

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 11822
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:51:58 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig bbc.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> bbc.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62584
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;bbc.com.			IN	A

;; ANSWER SECTION:
bbc.com.		295	IN	A	151.101.0.81
bbc.com.		295	IN	A	151.101.192.81
bbc.com.		295	IN	A	151.101.128.81
bbc.com.		295	IN	A	151.101.64.81

;; Query time: 9 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:03 EST 2026
;; MSG SIZE  rcvd: 100

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 34567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 16 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:03 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig nytimes.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> nytimes.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14076
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;nytimes.com.			IN	A

;; ANSWER SECTION:
nytimes.com.		300	IN	A	151.101.65.164
nytimes.com.		300	IN	A	151.101.1.164
nytimes.com.		300	IN	A	151.101.193.164
nytimes.com.		300	IN	A	151.101.129.164

;; Query time: 37 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:18 EST 2026
;; MSG SIZE  rcvd: 104

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 566
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 4 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:18 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig nytimes.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> nytimes.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5608
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;nytimes.com.			IN	A

;; ANSWER SECTION:
nytimes.com.		295	IN	A	151.101.65.164
nytimes.com.		295	IN	A	151.101.1.164
nytimes.com.		295	IN	A	151.101.193.164
nytimes.com.		295	IN	A	151.101.129.164

;; Query time: 2 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:23 EST 2026
;; MSG SIZE  rcvd: 104

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 965
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 4 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:23 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig washingtonpost.com 10.0.1.101

; <<>> DiG 9.10.6 <<>> washingtonpost.com 10.0.1.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5287
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;washingtonpost.com.		IN	A

;; ANSWER SECTION:
washingtonpost.com.	300	IN	A	23.75.122.75

;; Query time: 22 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:30 EST 2026
;; MSG SIZE  rcvd: 63

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 60809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.101.			IN	A

;; Query time: 5 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:30 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % dig washingtonpost.com 10.0.1.102

; <<>> DiG 9.10.6 <<>> washingtonpost.com 10.0.1.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1227
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;washingtonpost.com.		IN	A

;; ANSWER SECTION:
washingtonpost.com.	294	IN	A	23.75.122.75

;; Query time: 3 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:35 EST 2026
;; MSG SIZE  rcvd: 63

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: FORMERR, id: 63919
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;10.0.1.102.			IN	A

;; Query time: 17 msec
;; SERVER: 10.0.1.101#53(10.0.1.101)
;; WHEN: Thu Jan 01 20:52:35 EST 2026
;; MSG SIZE  rcvd: 39

ericnix@Erics-Mac-Studio ~ % 

[cuonglm]

Thanks for reporting.

We will investigate further and see if we can make any improvements.

[ericnixmd]

Thanks for reporting.

We will investigate further and see if we can make any improvements.

Hey cuonglm, any update on this?

[cuonglm]

Thanks for reporting.

We will investigate further and see if we can make any improvements.

Hey cuonglm, any update on this?

Hi, we have been working on this internally, there's already a patch, tested with some positive results.

If the fix were done, it's likely included in next release.

[cuonglm]

@ericnixmd The dev binary has been updated to include an improvement to DoQ/DoT.

Your second query and so on will run faster than the first one. Would you mind give it a try?

[ericnixmd]

Much faster! dnscheck.tools was previously reporting 45-60 ms latency and would only improve to 30 at best. I'm getting 18-20 ms latency, which is now comparable to DoH/3. Also, dig lookups are much faster especially on subsequent lookups.

Thank you!

UPDATE: Initial testing is still a little slower than what I get with DoH/3, but repeat testing is definitely faster than it was before. Even initial testing seems a bit faster.