Apple Services after not available after some time. Only renewing the internet connection will solve it.

[pictosun]

Platform

macOS

Protocol

DNS-over-HTTPS

Do you use AdGuard app?

No I don't

Your configuration

• macOS/iOS (newest system update)
• using .mobileconfig Profiles on macOS/iOS (and also tried AdGuard Pro App with AdGuard DNS as native profile)
• tried DoT/DoH with .mobileconfig and DoQ (with a 3rd party app and without .mobileconfig)
• block Apple private relay function is 'not' used (and I do have apple services on my whitelist)

Traceroute to AdGuard DNS

./. doesn't matter

Issue Details

• While using iOS/macOS devices after several amount of time (especially when changing networks from mobile to WIFI and so on) it does happen that Apple services like App Store, Apple Music do not work anymore.
• Even force quitting the apps don't bring back connection to the services
• when putting the devices into flight mode and back online the services do work again

Expected Behavior

It should work all the time

Actual Behavior

When using AdGuard DNS (with some blocklists) the problem exists and reappears often.

Screenshots

No response

Additional Information

When using some other DNS services like NextDNS, ControlD etc. (nearly same blocklists enabled) the issue is not existent

It looks like it's something correlated to AdGuard DNS service at all?

[Chinaski1]

Hello there!

Please clarify the following information:

• Do you use third-party software like a VPN?
• Which blocklists are enabled?
• What DNS server are you connected to?

[pictosun]

Do you use third-party software like a VPN?

• No 3rd party tools

Which blocklists are enabled?

• HaGeZi Pro & TIF, DynDNS, DNS/VPN/TOR/Proxy Bypass and Gamling | Smart-TV Blocklist for AdGuard Home (by Dandelion Sprout)

What DNS server are you connected to?

• dns2-dp-fra-5

[Chinaski1]

To start, the easiest test is to try to disable all third-party filters except AdGuard DNS and check if the issue persists.
In turn, we'll investigate the situation on our side.

[pictosun]

Will try to look at it with iOS 17.5 and macOS 14.5 installed. Maybe it's a Apple bug which has been resolved?!

[pictosun]

@Chinaski1 I can give you the update, that the issue just appeared again when changing WAN networks.

I also checked the query logs and cannot see any block within this time and/or domains... So the blocklists shouldn't be the issue and it looks like it is something else.

Changing DNS profile to some other provider solves the issue. Going back to AdGuard DNS after that also works.

EDIT:
Found out, that those issues also have on my Teamviewer App (logged out and said no service possible) after changing the WAN network. So definitively not an Apple only thing.

[pictosun]

Just do give you an update over here... When changing to an other DNS service (Contr...D, Ne...DNS) I do not have those issues (using nearly the same blocklists) and I think it's not related to blocklists itself, as there is nothing showing up within blocked queries.

So something must be different within AdGuard DNS?
Could it maybe something correlated to this: #227

[Chinaski1]

At this stage it is difficult to say what may be causing the issue. It is not reproduced on our side, we are looking into it.

[hagezi]

I use AdGuard DNS via mobileconfig on 10 Apple devices, including iPhones, iPads, Macbooks and Apple TV and do not have this problem and cannot reproduce it.

[pictosun]

Thanks for your feedback. Really a strange behavior. For me I can more or less reproduce it on several devices with several kind of blocklists (don’t think the lists are the issue).

What I (maybe) found out is, that it is eventually related to changing WAN networks with IPv4/IPv6 changing.
At home I do have dual stack, at work IPv4 and mobile it depends on.

Don’t know if this is maybe the case and has something to do with my issues.

As it happended to several macOS/iOS versions I don’t think that this is the case. Especially while hagezi says that everything is fine for his devices.

Don’t know how can look into more details to report it over here to find the reason why this is happening (and also only happening when using AdGuard DNS - with NextDNS and ControlD and other DNS services I don’t have those issues?!).

As I said, I will try to narrow it down so that finding the reason is easier?!

Thanks for your product and help over here.