The issue I am looking for help with, together with some troubleshooting steps alredy taken is described at r/docker, but it doesn’t seem to be interesting enough to get any attention
My current setup:
- PiHole running in Docker ( official image
- Docker home dir is on mdadm raid1 )
- PiHole home and configs (
/etc/dnsmasq.ddirectories) are located on mirror ZFS dataset (different physical device than Docker storage backend)
- host is HP DL380e G8 with 2x E5-2450L and 64 GB of RAM, so I doubt HW performance is the issue
- host is running Debian Testing
Effect of the issue:
root@1068cc07c7b9:/# curl https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts -vvv * Expire in 0 ms for 6 (transfer 0x55762eb3aec0) [ ... lots of those ... ] * Expire in 14 ms for 1 (transfer 0x55762eb3aec0) * Trying 126.96.36.199... * TCP_NODELAY set * Expire in 149978 ms for 3 (transfer 0x55762eb3aec0) * Expire in 200 ms for 4 (transfer 0x55762eb3aec0) * Connected to raw.githubusercontent.com (188.8.131.52) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * TLSv1.3 (OUT), TLS handshake, Client hello (1): * Operation timed out after 300216 milliseconds with 0 out of 0 bytes received * Closing connection 0 curl: (28) Operation timed out after 300216 milliseconds with 0 out of 0 bytes received
curl times out (randomly, there are times that it passes). It never timeouts inside a container in
host networking mode.
What I tried so far:
curling the blocklist from pihole container
/bin/bash. Went as slow as gravity update.
- tried different container - same case.
curling the blocklist from container with
hostnetwork mode - blazingly fast
- changing to various MTU - especially setting lower MTU for docker interface then the main ethernet MTU → didn’t help
- I made sure I have installed docker from official docker repository
- I flushed hosts
- I checked the connection from different machines in the same network to exclude network firewall/routing → excluded
What surprises me the most is that another instance of PiHole set up and maintained in the same way (though on different host) works perfectly fine and snappy
Have you ever faced similar issue or have seen it anywhere? Do you maybe have any ideas what might be causing this behavior?