oDoH multiple warnings - is this normal

[an0wak]

Hi All,

Not sure, this may be a stupid questions - but I've been playing around with setting up Anonymized DNS and I seem to be getting a lot of warning. Not sure if it's configured correctly as example are slim in terms of which server to used with which relay.

I've just used all server as there aren't that many:

server_names = ['odoh-jp.tiar.app', 'odoh-id-gmail', 'odoh-koki-noads-ams', 'odoh-koki-se', 'odoh-ibksturm', 'odoh-jp.tiarap.org', 'odoh-koki-noads-se', 'odoh-koki-ams', 'odoh-crypto-sx', 'odoh-tiarap.org', 'odoh-cloudflare']

odoh_servers = true

# Uncommented the [source.odoh-servers]

routes = [
    { server_name='odoh-jp.tiar.app', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-id-gmail', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-koki-noads-ams', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-koki-se', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-ibksturm', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-jp.tiarap.org', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-koki-noads-se', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-koki-ams', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-crypto-sx', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-tiarap.org', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] },
    { server_name='odoh-cloudflare', via=['odohrelay-crypto-sx', 'odohrelay-surf', 'odohrelay-ibksturm', 'odohrelay-koki-ams', 'odohrelay-koki-se'] }
]

Warnings are as follows

[2022-08-24 06:30:45] [NOTICE] Firefox workaround initialized
[2022-08-24 06:30:46] [NOTICE] Anonymizing queries for [odoh-koki-noads-ams] via [odohrelay-crypto-sx]
[2022-08-24 06:30:46] [WARNING] Unable to decrypt response from [odoh-koki-noads-ams]: [Malformed response]
[2022-08-24 06:30:46] [NOTICE] Anonymizing queries for [odoh-koki-noads-ams] via [odohrelay-crypto-sx]
[2022-08-24 06:30:50] [WARNING] Unable to decrypt response from [odoh-koki-noads-ams]: [Malformed response]
[2022-08-24 06:30:51] [NOTICE] Anonymizing queries for [odoh-koki-noads-ams] via [odohrelay-koki-ams]
[2022-08-24 06:30:56] [NOTICE] [odoh-koki-noads-ams] OK (ODoH) - rtt: 248ms
[2022-08-24 06:30:57] [NOTICE] Anonymizing queries for [odoh-koki-noads-se] via [odohrelay-koki-ams]
[2022-08-24 06:31:00] [NOTICE] [odoh-koki-noads-se] OK (ODoH) - rtt: 270ms
[2022-08-24 06:31:02] [NOTICE] Anonymizing queries for [odoh-ibksturm] via [odohrelay-surf]
[2022-08-24 06:31:03] [NOTICE] [odoh-ibksturm] OK (ODoH) - rtt: 290ms
[2022-08-24 06:31:04] [NOTICE] Anonymizing queries for [odoh-tiarap.org] via [odohrelay-surf]
[2022-08-24 06:31:07] [NOTICE] [odoh-tiarap.org] OK (ODoH) - rtt: 444ms
[2022-08-24 06:31:08] [NOTICE] Anonymizing queries for [odoh-koki-ams] via [odohrelay-crypto-sx]
[2022-08-24 06:31:10] [NOTICE] [odoh-koki-ams] OK (ODoH) - rtt: 245ms
[2022-08-24 06:31:11] [NOTICE] Anonymizing queries for [odoh-jp.tiar.app] via [odohrelay-crypto-sx]
[2022-08-24 06:31:12] [NOTICE] [odoh-jp.tiar.app] OK (ODoH) - rtt: 243ms
[2022-08-24 06:31:12] [NOTICE] Anonymizing queries for [odoh-id-gmail] via [odohrelay-crypto-sx]
[2022-08-24 06:31:17] [NOTICE] [odoh-id-gmail] OK (ODoH) - rtt: 96ms
[2022-08-24 06:31:17] [NOTICE] Anonymizing queries for [odoh-jp.tiarap.org] via [odohrelay-ibksturm]
[2022-08-24 06:31:19] [NOTICE] Anonymizing queries for [odoh-jp.tiarap.org] via [odohrelay-surf]
[2022-08-24 06:31:21] [NOTICE] [odoh-jp.tiarap.org] OK (ODoH) - rtt: 677ms
[2022-08-24 06:31:21] [NOTICE] Anonymizing queries for [odoh-crypto-sx] via [odohrelay-koki-se]
[2022-08-24 06:31:25] [NOTICE] [odoh-crypto-sx] OK (ODoH) - rtt: 302ms
[2022-08-24 06:31:27] [NOTICE] System DNS configuration not usable yet, exceptionally resolving [odoh-target-se.alekberg.net] using bootstrap resolvers over tcp
[2022-08-24 06:31:28] [WARNING] Failed to receive successful response from [odoh-jp.tiar.app]
[2022-08-24 06:31:28] [WARNING] Failed to receive successful response from [odoh-id-gmail]
[2022-08-24 06:31:28] [NOTICE] Anonymizing queries for [odoh-koki-se] via [odohrelay-crypto-sx]
[2022-08-24 06:31:32] [NOTICE] [odoh-koki-se] OK (ODoH) - rtt: 410ms
[2022-08-24 06:31:32] [NOTICE] Anonymizing queries for [odoh-cloudflare] via [odohrelay-koki-se]
[2022-08-24 06:31:37] [NOTICE] [odoh-cloudflare] OK (ODoH) - rtt: 257ms
[2022-08-24 06:31:37] [NOTICE] Sorted latencies:
[2022-08-24 06:31:37] [NOTICE] -    96ms odoh-id-gmail
[2022-08-24 06:31:37] [NOTICE] -   243ms odoh-jp.tiar.app
[2022-08-24 06:31:37] [NOTICE] -   245ms odoh-koki-ams
[2022-08-24 06:31:37] [NOTICE] -   248ms odoh-koki-noads-ams
[2022-08-24 06:31:37] [NOTICE] -   257ms odoh-cloudflare
[2022-08-24 06:31:37] [NOTICE] -   270ms odoh-koki-noads-se
[2022-08-24 06:31:37] [NOTICE] -   290ms odoh-ibksturm
[2022-08-24 06:31:37] [NOTICE] -   302ms odoh-crypto-sx
[2022-08-24 06:31:37] [NOTICE] -   410ms odoh-koki-se
[2022-08-24 06:31:37] [NOTICE] -   444ms odoh-tiarap.org
[2022-08-24 06:31:37] [NOTICE] -   677ms odoh-jp.tiarap.org
[2022-08-24 06:31:37] [NOTICE] Server with the lowest initial latency: odoh-id-gmail (rtt: 96ms)
[2022-08-24 06:31:37] [NOTICE] dnscrypt-proxy is ready - live servers: 11

## and then constant warnings

[2022-08-24 21:11:27] [WARNING] Failed to receive successful response from [odoh-koki-se]
[2022-08-24 21:20:31] [WARNING] Failed to receive successful response from [odoh-koki-ams]
[2022-08-24 21:51:54] [WARNING] Failed to receive successful response from [odoh-crypto-sx]
[2022-08-24 21:51:54] [WARNING] Failed to receive successful response from [odoh-crypto-sx]
[2022-08-24 22:04:01] [WARNING] Failed to receive successful response from [odoh-jp.tiarap.org]
[2022-08-24 21:07:52] [WARNING] ODoH relay for [odoh-koki-se] is buggy and returns a 200 status code instead of 401 after a key update
[2022-08-24 21:07:53] [WARNING] ODoH relay for [odoh-koki-se] is buggy and returns a 200 status code instead of 401 after a key update
[2022-08-24 21:07:53] [WARNING] ODoH relay for [odoh-koki-se] is buggy and returns a 200 status code instead of 401 after a key update
[2022-08-24 21:05:54] [WARNING] Unable to decrypt response from [odoh-koki-noads-ams]: [Malformed response]

Is this normal behaviour?

Regards

[lifenjoiner]

I tried your config. There was none of those warnings on my side.

I assume that:

1. the Failed to receive successful response and Unable to decrypt response could be caused by the quality of your network;
2. the is buggy and returns a 200 status code could be a real bug or could be possible if you use a http proxy.

Anyway, even there are warnings, if there are still servers available, it is not critical.

[an0wak]

Thanks lifenjoiner,
Don't believe I have network quality issues. Using other methods i.e DoH and DNScrypt exhibit not errors? For the 200 status code, not using a http proxy.

Anyway I'll keep troubleshooting but obviously issue is on my end.

BTW - is there a better configuration than just specifying all destinations like I have?

Regards

[an0wak]

Just took another look at my logs and get following

[2022-08-28 22:17:37] [NOTICE] System DNS configuration not usable yet, exceptionally resolving [ipv6.download.dnscrypt.info] using bootstrap resolvers over tcp
[2022-08-28 22:17:58] [WARNING] /config/odoh-relays.md: chtimes odoh-relays.md: operation not permitted
[2022-08-28 22:18:01] [WARNING] /config/public-resolvers.md: chtimes public-resolvers.md: operation not permitted
[2022-08-28 22:18:01] [WARNING] /config/relays.md: chtimes relays.md: operation not permitted
[2022-08-28 22:18:02] [WARNING] /config/odoh-servers.md: chtimes odoh-servers.md: operation not permitted
[2022-08-28 22:22:34] [WARNING] Failed to receive successful response from [odoh-tiarap.org]
[2022-08-28 22:41:39] [NOTICE] System DNS configuration not usable yet, exceptionally resolving [jp.tiar.app] using bootstrap resolvers over tcp
[2022-08-28 22:41:40] [NOTICE] Anonymizing queries for [odoh-jp.tiar.app] via [odohrelay-koki-se]
[2022-08-28 22:41:49] [NOTICE] Anonymizing queries for [odoh-ibksturm] via [odohrelay-koki-ams]
[2022-08-28 22:41:55] [NOTICE] Anonymizing queries for [odoh-tiarap.org] via [odohrelay-crypto-sx]
[2022-08-28 22:42:00] [NOTICE] Anonymizing queries for [odoh-koki-noads-se] via [odohrelay-ibksturm]
[2022-08-28 22:42:05] [NOTICE] Anonymizing queries for [odoh-koki-noads-se] via [odohrelay-koki-se]
[2022-08-28 22:42:09] [NOTICE] Anonymizing queries for [odoh-cloudflare] via [odohrelay-surf]
[2022-08-28 22:42:12] [NOTICE] Anonymizing queries for [odoh-koki-se] via [odohrelay-koki-se]
[2022-08-28 22:42:16] [NOTICE] Anonymizing queries for [odoh-koki-ams] via [odohrelay-koki-ams]
[2022-08-28 22:42:23] [NOTICE] Anonymizing queries for [odoh-id-gmail] via [odohrelay-surf]
[2022-08-28 22:42:27] [NOTICE] Anonymizing queries for [odoh-jp.tiarap.org] via [odohrelay-ibksturm]
[2022-08-28 22:42:30] [NOTICE] Anonymizing queries for [odoh-jp.tiarap.org] via [odohrelay-koki-se]
[2022-08-28 22:42:34] [NOTICE] Anonymizing queries for [odoh-koki-noads-ams] via [odohrelay-koki-ams]
[2022-08-28 22:42:37] [NOTICE] Anonymizing queries for [odoh-crypto-sx] via [odohrelay-ibksturm]
[2022-08-28 22:42:39] [NOTICE] Anonymizing queries for [odoh-crypto-sx] via [odohrelay-ibksturm]
[2022-08-28 22:42:43] [NOTICE] Anonymizing queries for [odoh-crypto-sx] via [odohrelay-ibksturm]
[2022-08-28 22:42:48] [NOTICE] Sorted latencies:
[2022-08-28 22:42:48] [NOTICE] -   236ms odoh-tiarap.org
[2022-08-28 22:42:48] [NOTICE] -   242ms odoh-koki-noads-ams
[2022-08-28 22:42:48] [NOTICE] -   244ms odoh-koki-ams
[2022-08-28 22:42:48] [NOTICE] -   255ms odoh-koki-noads-se
[2022-08-28 22:42:48] [NOTICE] -   255ms odoh-cloudflare
[2022-08-28 22:42:48] [NOTICE] -   261ms odoh-koki-se
[2022-08-28 22:42:48] [NOTICE] -   276ms odoh-ibksturm
[2022-08-28 22:42:48] [NOTICE] -   320ms odoh-crypto-sx
[2022-08-28 22:42:48] [NOTICE] -   422ms odoh-id-gmail
[2022-08-28 22:42:48] [NOTICE] -   516ms odoh-jp.tiar.app
[2022-08-28 22:42:48] [NOTICE] -   693ms odoh-jp.tiarap.org
[2022-08-28 22:42:48] [NOTICE] Server with the lowest initial latency: odoh-tiarap.org (rtt: 236ms)
[2022-08-28 22:48:37] [WARNING] Failed to receive successful response from [odoh-koki-noads-ams]
[2022-08-28 22:48:40] [WARNING] Failed to receive successful response from [odoh-tiarap.org]
[2022-08-28 22:48:41] [WARNING] Failed to receive successful response from [odoh-koki-ams]
[2022-08-28 23:01:52] [WARNING] Failed to receive successful response from [odoh-koki-noads-se]

[lifenjoiner]

Config: follow the examples and wiki. * may be what you want.

Look at the time stamps, it doesn't mean "constant" warnings mean the app doesn't work correctly constantly. They work silently.
The facts are:

1. the default log level is >= NOTICE,
2. so the normal/good queries are not logged,
3. you will see notice, warnings and even critical errors.