ASUS RT-AX89X QoS issue with self hosted nginx instance

[Jerky_san]

Whenever I turn on QoS on my AX89X I am no longer able to connect to any websites that I host on an nginx instance internally on my wan using internet facing URLs. I'm using the URLs for the internet so it's doing a DNS lookup to my ip and probably going through the WAN via port forwarding(443) but I'm unsure why this will kill my ability to access the websites. If I am outside of my lan and say using my cellphone without WiFi all the websites and such are accessible. I tried to illustrate it below as well. Has anyone encountered this problem? I used to run QoS on my old ASUS router but it was Merlin's firmware and I don't remember ever having this issue. If others have this issue I was going to open a ticket with Asus and see if they could look into it and perhaps resolve it.

Thank you and I appreciate your time in reading the post!

Basically looks like this (Adaptive QoS enabled)
Highest
WFH
Gaming
LFH
Video & Audio
Web
File
Others
Lowest

Broken(times out and packets never are returned)
LAN -> URL(Internet IP) -> WAN(443) -> NGINX

Works
WAN -> URL(Internet IP) -> WAN(443) -> NGINX

 

[Migueldd]

I'm having the exactly same problem. Nginx on Home assitant behind an AX89X. The problem persists in the latest firmware

3.0.0.4.388_32407.​

 

[Jerky_san]

I'm having the exactly same problem. Nginx on Home assitant behind an AX89X. The problem persists in the latest firmware

3.0.0.4.388_32407.​

No fix for it when I had it.. ASUS eventually caved and sent me a gt-ax16000 which allows me to run merlin. It's a problem with their firmware and they won't fix it.

Should also state I had to complain A LOT... took them like 4 and a half months to finally cave and send me that. They originally wanted to send me a crap router and I told them I needed the 10gb ports(because I did).. they finally caved but they made me send back the ax89x first.

 

[fleckens]

Can you connect to your webserver on it's IP ? I know the cert will fail but do you have a connection ?

Ideally when you DNS resolve it internally you need to resolve to the local IP address not the internet IP... As a test can you add an entry to a host file on the connecting PC and see if that works?

Another option is to add a hairpin NAT that basically translates the public IP for your website to the internal IP of the server when the source is your LAN. I've seen this scenario at work many times on an enterprise network, not sure you can add things like hairpin NATs on these ASUS devices.

I have this setup for a few things on PFSENSE in my network that had similar problems.