Why is my local router so slow on DNS?

  • DNS Benchmark v2 Release 5 with Consultant License
    Guest:
    If you own any earlier release of our DNS Benchmark you may immediately download its release #5 replacement. Running an earlier release will detect the new release and help you upgrade.

    Although this release is cosmetic, appearance matters and affects ease of use. The biggest change, as seen in the image above, is that the DNS Benchmark now has a traditional Windows application menu to more fully expose its many features. This release is also "Consultant License Aware" and GRC will now issue a Consultant version when owners have previously purchased four "Personal Use" licenses. If you have previously purchased four DNSB licenses, or if you wish to upgrade your "Personal Use" license to Consultant, GRC's purchase process will direct you through that process.
    /Steve.
  • Be sure to checkout “Tips & Tricks”
    Dear Guest Visitor → Once you register and log-in please checkout the “Tips & Tricks” page for some very handy tips!

    /Steve.
  • BootAble – FreeDOS boot testing freeware

    To obtain direct, low-level access to a system's mass storage drives, SpinRite runs under a GRC-customized version of FreeDOS which has been modified to add compatibility with all file systems. In order to run SpinRite it must first be possible to boot FreeDOS.

    GRC's “BootAble” freeware allows anyone to easily create BIOS-bootable media in order to workout and confirm the details of getting a machine to boot FreeDOS through a BIOS. Once the means of doing that has been determined, the media created by SpinRite can be booted and run in the same way.

    The participants here, who have taken the time to share their knowledge and experience, their successes and some frustrations with booting their computers into FreeDOS, have created a valuable knowledgebase which will benefit everyone who follows.

    You may click on the image to the right to obtain your own copy of BootAble. Then use the knowledge and experience documented here to boot your computer(s) into FreeDOS. And please do not hesitate to ask questions – nowhere else can better answers be found.

    (You may permanently close this reminder with the 'X' in the upper right.)

neilhutton

Member
Sep 19, 2026
5
1
Just did my first runs with the DNS Benchmark and I think it’s flushed out a problem with my network, but I could do with the group’s advice.

In my router (a Netgear Nighthawk X4 R7500) I had the DNS servers set to Google’s public DNS, which at the time that I set it, I think the old DNS benchmark told me that was the best option. However, when I run the benchmark today, Google doesn’t fare so well. So I changed it to one of the ones very near the top of my list (Cisco) and ran again.

With Cisco, the red part of the benchmark (cached results) looks the same whether it’s coming from my router or whether it’s coming from Cisco (as you would expect). However, the green and purple bars are much worse when they’re coming out of the router compared to going directly to Cisco.

The obvious fix is to tell each of the devices in my network to use the Cisco DNS directly. But that’s no fun, I have a ton of devices and I keep adding more. It would be very tedious to configure every device. It’s much easier to have the router just hand out the DNS settings so I can manage it in one place.

I assume that the problem is that the router is simply slow to process these out of cache requests. That would make sense. Although when I bought the router it was considered high-end, that was years ago and things move on, and it may now be ready to be replaced.

If you think I am reading that correctly, what would you recommend as a suitable replacement?

Some considerations: this is not the only router in my network. I use Steve’s classic Y configuration with three routers (although the router we are talking about here has the DNS settings codes in directly, rather than getting them from one higher up the chain). Also, the routers are only used for Ethernet connections, the wireless stuff is all done with a mesh network (the testing above was only done via Ethernet). I have a gigabit connection to the outside world, and there’s a chance that the ISPs around here will give me something much faster in times to come. So, if I replace that router, I need something that can cope with the higher speeds. In the past I’ve seen routers that can cope with high speeds within the network, but don’t make full use of high speeds on the feed from the Internet. So I don’t want to fall down that trap.

What do you think team?
 
In general I am a DNS Benchmark doubter. Not that I doubt there are some really bad options out there, but I doubt that a difference of a few ms here or there is actually noticeable to any user. After all, how often are you really looking up a new domain, versus hitting a cached entry. If you have many devices, they're all working together to keep the entries cached all the way up and down your tree of DNS hierarchy. (Presuming that your PC/phone is caching, your router is caching, your next level DNS is caching and any level above it might as well. Although there may not be any higher level above it, they may go right to the root DNS.)

Anyway, it does sound like your router might be a little under powered at this DNS work... but again, do you actually notice it in day to day use, or is it just a statistic that is measurable while its impact, not so much.

For me, I stick with Quad9 even though it's not the fastest option for me, because I want the theoretical additional safety it might provide, and I also use it with DoH to keep my ISP from snooping in my business. While it is technically a little slower than a better choice, I can't say I've ever had the occasion to care.
 
when I bought the router it was considered high-end, that was years ago
The Netgear Nighthawk X4 R7500 router was initially released in 2015. That router is 11 model years old and is EOL. Per Netgear its last firmware update was Mar 30, 2023, 3.5 years ago. It is now a security risk for your network as it has known unpatched vulnerabilities. It should be replaced for that reason alone.

Speed wise the Netgear Nighthawk X4 R7500 router has a rated speed of up to 2.33 Gbps, which includes 600 Mbps on the 2.4 GHz band and 1733 Mbps on the 5 GHz band. This is no longer "fast" by today's standards.
the routers are only used for Ethernet connections, the wireless stuff is all done with a mesh network (the testing above was only done via Ethernet)
For mesh compatibility it might be wise to look at newer faster Netgear routers?
 
In general I am a DNS Benchmark doubter. Not that I doubt there are some really bad options out there, but I doubt that a difference of a few ms here or there is actually noticeable to any user. After all, how often are you really looking up a new domain, versus hitting a cached entry. If you have many devices, they're all working together to keep the entries cached all the way up and down your tree of DNS hierarchy. (Presuming that your PC/phone is caching, your router is caching, your next level DNS is caching and any level above it might as well. Although there may not be any higher level above it, they may go right to the root DNS.)

Anyway, it does sound like your router might be a little under powered at this DNS work... but again, do you actually notice it in day to day use, or is it just a statistic that is measurable while its impact, not so much.

For me, I stick with Quad9 even though it's not the fastest option for me, because I want the theoretical additional safety it might provide, and I also use it with DoH to keep my ISP from snooping in my business. While it is technically a little slower than a better choice, I can't say I've ever had the occasion to care.
>In general I am a DNS Benchmark doubter.

Hanging around in this forum that makes you a radical atheist in a baptism church 😄

I have been talking to the AIs about this and they tell me that my router is from 2014! I knew it was old, but I had not realised how old. Makes sense it might not have enough horsepower to do this well.

>but I doubt that a difference of a few ms here or there is actually noticeable to any user.

It’s more than that. The Tabular view shows an average for uncached of 0.063s when accessed direct and 0.123s via the router. Max is over 1s with 1.447 jitter. That should be enough to notice.

>After all, how often are you really looking up a new domain, versus hitting a cached entry.

I don’t have a way to get the real numbers, but I suspect I hit new domains all the time (I have a lot of interests).

I have my main desktop set to go direct now and it feels snappier already (not sure if that’s psychosomatic).

What I thought would happen when I posted this is you guys would all jump in with suggestions about which routers do DNS is the quickest. I thought you would all be enthusiast for crushing DNS times. So far, not.

The AIs suggested UbiQuiti UCG-MAX and TP-Link ER707-M2. Both of which are a bit pricy, but not unobtainable.

Any thoughts on those?
 
The Netgear Nighthawk X4 R7500 router was initially released in 2015. That router is 11 model years old and is EOL. Per Netgear its last firmware update was Mar 30, 2023, 3.5 years ago. It is now a security risk for your network as it has known unpatched vulnerabilities. It should be replaced for that reason alone.

Speed wise the Netgear Nighthawk X4 R7500 router has a rated speed of up to 2.33 Gbps, which includes 600 Mbps on the 2.4 GHz band and 1733 Mbps on the 5 GHz band. This is no longer "fast" by today's standards.

For mesh compatibility it might be wise to look at newer faster Netgear routers?
You are right of course. I had been meaning to replace that for a while, but it kept slipping down my task list.

It does not need to be a netgear product. My Mesh is Eero.

What would be your dream router? (does not need to be wireless, I would only switch off the wireless and use the Mesh for that).
 
Any thoughts on those?
I recently picked up the Flint 2 from GLinet. It's technically on the old side now, they have a 3 and even a 4, but it was the right price for me, and I was already familiar with the brand from having used and liked one of their small travel VPN routers. It seems plenty fast enough, and has an interesting feature which will break your DNS Benchmarks... it can force override UDP DNS queries to always go to the DNS server you choose. I'll include a link but I'm going to spoiler it, because I am not really trying to promote it or anything, and I bought mine direct from Amazon for a better price anyway.
 
Hanging around in this forum that makes you a
I actually mentioned my skepticism direct to Steve on his newsgroups when I was helping with the testing. He more or less said to me that he understood, and didn't disagree with my take, but there appeared to be many people interested in the DNS Benchmark, so he was going to meet that need irrespective of the doubters 😉
 
The AIs suggested UbiQuiti UCG-MAX and TP-Link ER707-M2. Both of which are a bit pricy, but not unobtainable.
I really like Ubiquiti's products. I work for an MSP, and we have deployed a LOT of their access points and routers. I also use their access points at home, but an old PC running pfSense as my router. My recommendation is for the UCG-Ultra since it's less expensive, but still plenty fast. You only need the UCG-Max if your internet is faster than 1 Gbps, or if you want to also use it as an NVR.
 
In general I am a DNS Benchmark doubter. Not that I doubt there are some really bad options out there, but I doubt that a difference of a few ms here or there is actually noticeable to any user.
Another issue that the DNS Benchmark doesn't cover is that ISPs change their routing all the time. I use 1.1.1.1, and my ping to them sometimes more than doubles. However, I've never felt a difference in webpage responsiveness.
1789942360524.png

Here's my ping to OVH's BHS datacenter, which I believe is in Ontario. I'm in the northwest US.
1789942589588.png
 
Off Topic: Do you actually use OVH?
No. I set up that ping a long time ago when I was playing a game whose server was hosted in that datacenter. I no longer play that game, but I kept that monitor running because it's a useful bit of data to compare against the other ones.
 
I have listen to all the wisdom given here, talked to the AIs, watched the reviews and I and think the right answer for me is...

UbiQuiti UCG-FIBER​


Seems to do everything I can think of, plus has head room for faster speeds in the future. Seems like a very high end bit of kit for the price.
 
I have experience with Ubiquiti and Verizon and will say, Verizon seems to target Ubiquiti hardware (at least Uni-Fi) and messes things up. I had a UDM, and after about 6 months of switching from AT&T DSL to Verizon 5G, for some reason, my UDM would drop packets from the WAN port. ANYTHING more than 50MB would fail, which happens to include its own auto-updates. During that time, I have seen many posts about Uni-Fi and Verizon not working when I searched for the issue. I had switched to an Opnsense box at some point. Steve was talking about his pfSense setup, and I decided to try it out myself but went Opnsense for reasons I can't remember now.

NOTE: Things might be different if you can direct connect the fiber line. I assume there's an issue with Verizon's modem.
 
I have experience with Ubiquiti and Verizon and will say, Verizon seems to target Ubiquiti hardware (at least Uni-Fi) and messes things up. I had a UDM, and after about 6 months of switching from AT&T DSL to Verizon 5G, for some reason, my UDM would drop packets from the WAN port. ANYTHING more than 50MB would fail, which happens to include its own auto-updates. During that time, I have seen many posts about Uni-Fi and Verizon not working when I searched for the issue. I had switched to an Opnsense box at some point. Steve was talking about his pfSense setup, and I decided to try it out myself but went Opnsense for reasons I can't remember now.

NOTE: Things might be different if you can direct connect the fiber line. I assume there's an issue with Verizon's modem.
I have a mostly Unifi network and have no issues with Verizon 5G. It's what I use for my backup internet. The important part about cellular internet is to lower the MTU on the router's WAN port connected to it. The standard MTU of 1500 doesn't work well. I use 1428 and it's rock solid.
 
The thing was, when I did a search to see if anyone else had the issue, all I could find was people with Verizon Fiber having the same issue. At the same time, I couldn't figure out how to set my MTU value, or if I was setting it correctly, it wasn't fixing the issue I was having. The only way I could get it working was to put another router between my modem and the Unifi Dream Machine I had. For other reasons, I was getting annoyed at the UI anyway, so there were multiple things that caused me to just jump ship in the long run.