On 2020-04-16, William Ahern <will...@25thandclement.com> wrote: > I'm no network administrator, but a 3% failure rate would be very high on a > physical interface. vlan4 is presumably the interface your Apple device > passes through, right? Investigate why all the dropped packets. Start with > your queuing rules: examine/enable PF statistics, examine/enable PF logs, or > just disable queueing to rule it out entirely.
It's almost certainly the queueing. I would skip queuing for DNS packets or use a separate queue so they aren't affected by bulk transfers, by its nature it drops packets and if you do that to DNS it's going to make the end-user experience of the network very poor.