AdGuardHome stops responding to DNS requests; /control/status hangs; no logs

[craone]

Hello, I have been troubled by this issue for a long time. Previously, when installed natively, the same problem occurred. Recently, I switched to a Docker installation, and it still happens intermittently and unpredictably.

I am currently using the Docker version with the following command:

docker run --name adguardhome\
    -v /opt/adguardhome/work:/opt/adguardhome/work\
    -v /opt/adguardhome/conf:/opt/adguardhome/conf\
    -p 53:53/tcp -p 53:53/udp\
    -p 67:67/udp -p 1068:68/udp\ # Port 68 conflicts with the system's DHCP
    -p 80:80/tcp -p 443:443/tcp\
	-p 443:443/udp -p 3000:3000/tcp\
    -p 853:853/tcp    -p 784:784/udp\
	-p 853:853/udp -p 8853:8853/udp\
    -p 5443:5443/tcp -p 5443:5443/udp\
    -d adguard/adguardhome

Problem:
DNS stops responding, and the website hangs at /control/status.
Running docker logs -f --tail 200 adguardhome shows no logs.

Debugging inside the container:

1. Accessing the /control/status endpoint with authentication and timeout:

/opt/adguardhome/work # wget --no-verbose --tries=1 --spider --no-check-certificate --header='Authorization: Basic Base64(user:password)' --timeout=2 http://127.0.0.1/control/status
Connecting to 127.0.0.1 (127.0.0.1:80)
Connecting to 127.0.0.1 (127.0.0.1:443)
wget: download timed out

2. Without a timeout:

/opt/adguardhome/work # wget --no-check-certificate --spider --header='Authorization: Basic Base64(user:password)' http://127.0.0.1/control/status
Connecting to 127.0.0.1 (127.0.0.1:80)
Connecting to 127.0.0.1 (127.0.0.1:443)

4. If I use a POST request or omit the Authorization header, the endpoint responds immediately, and error logs appear:

wget --spider --max-redirect=0 http://127.0.0.1/control/status
Spider mode enabled. Checking for remote file existence.
--2025-12-25 14:24:16--  http://127.0.0.1/control/status
Connecting to 127.0.0.1:80... connected.
HTTP request sent, awaiting response... 401 Unauthorized
Authentication failed.

Example error logs:

2025/12/25 06:12:36.958417 [error] http: TLS handshake error from 127.0.0.1:39534: local error: tls: bad record MAC server=https
2025/12/25 06:15:38.046865 [info] webapi: warning: http error host=127.0.0.1 method=HEAD raddr=10.88.0.1:39548 request_uri=/control/status status=405 err="only method GET is allowed"
2025/12/25 06:32:31.647699 [error] http: TLS handshake error from 219.82.2.10:8868: remote error: tls: unknown certificate server=https

Version:
adguard/adguardhome:latest (Image ID: 331d034cfb33, 2 weeks ago, 77.4 MB)

Temporary Solution:
Restarting the container resolves the issue temporarily.

Question:
How can I troubleshoot this problem?