Your eero mesh network is up, devices show a solid connection, but websites refuse to load or take forever to resolve. The culprit is almost always DNS. The eero app abstracts a lot of the underlying network configuration, which makes DNS problems both common and frustrating to track down. This guide covers every realistic cause of eero DNS failure and gives you the exact steps to fix each one.

How eero Handles DNS

By default, eero acts as a DNS proxy. Your devices send DNS queries to the eero gateway (typically 192.168.4.1 or whatever your eero's LAN IP is), and the eero forwards those queries upstream to whatever DNS servers your ISP assigned via DHCP, or to manually configured servers if you have set them in the eero app. When that chain breaks at any point, DNS stops working even though your internet connection is technically active.

eero also integrates with eero Secure, Amazon's paid subscription that adds DNS-based content filtering. If that service has a backend outage or is misconfigured, it can silently kill DNS resolution for your entire network, which is one of the less-obvious failure modes people overlook.

Symptoms That Point to a DNS Problem

  • Websites show "Server not found" or "DNS_PROBE_FINISHED_NXDOMAIN" in the browser
  • Ping by hostname fails but ping by IP address succeeds
  • Apps that rely on cloud services stop working or hang on loading screens
  • Some sites load fine while others do not (partial DNS failures)
  • Smart home devices drop off their platforms but are still connected to Wi-Fi

The fastest confirmation test is to open a terminal or command prompt and try resolving a known-good domain directly:

nslookup google.com # or on macOS / Linux: dig google.com @8.8.8.8

If nslookup google.com times out but dig google.com @8.8.8.8 succeeds, the problem is definitively in how eero is handling DNS, not your upstream internet connection.

Step 1: Restart the eero Gateway Node

Before diving into configuration, restart the main gateway eero (the one physically connected to your modem). A full power cycle flushes the DNS cache, drops stale upstream DHCP leases, and re-establishes the ISP connection.

  1. Unplug the power cable from the gateway eero node.
  2. Wait a full 30 seconds.
  3. Plug it back in and wait for the LED to turn solid white (can take 90 seconds or more).
  4. Test DNS again with nslookup google.com.

If you have a separate modem in front of the eero, restart the modem first, wait 60 seconds, then restart the eero.

Step 2: Check and Change DNS Servers in the eero App

This is the most impactful fix for persistent DNS failures. eero lets you override the ISP-assigned DNS servers with any public resolver. Many ISP-provided DNS servers are slow, filtered, or simply broken in certain regions.

  1. Open the eero app on your phone.
  2. Tap the menu icon (three horizontal lines, top-left).
  3. Tap Network settings.
  4. Tap DNS.
  5. You will see either "Automatic" (uses ISP DNS) or a custom entry. Tap to change it.
  6. Select Custom DNS and enter your preferred servers.

Reliable public DNS options:

  • Cloudflare: 1.1.1.1 and 1.0.0.1
  • Google: 8.8.8.8 and 8.8.4.4
  • Quad9 (security-filtered): 9.9.9.9 and 149.112.112.112

After saving, the eero app will prompt you to confirm the change. All devices on your network will start using the new DNS servers within about 60 seconds, once their existing DHCP leases renew or they reconnect.

💡 After changing your eero DNS servers, use the DNS Propagation Checker to confirm that your domain queries are resolving correctly from your network location and that the change has taken effect globally.

Step 3: Check eero Secure DNS Filtering

If you subscribe to eero Secure or eero Secure+, the built-in content filtering works by routing all DNS through Amazon's filtering infrastructure. When that service experiences a backend issue, or if a filter category is misconfigured, entire classes of domains stop resolving.

  1. In the eero app, go to Discover (or the shield icon, depending on app version).
  2. Tap eero Secure.
  3. Look at your active filters under Block settings.
  4. Temporarily disable all content filters and test DNS resolution again.

If disabling the filters restores DNS, the issue is that one of your enabled categories is too aggressive or is catching legitimate domains as false positives. Common culprits are the "Ad blocking" and "Safe search" filters, which can interfere with CDN domains and API endpoints that apps depend on.

You can whitelist specific domains inside eero Secure: go to Network settings > Content filters > Allowed sites and add the affected domain. This is especially useful for internal tools or less common domains that get caught by the ad-blocking heuristics.

Step 4: Rule Out a Double-NAT DNS Loop

Many ISPs supply a modem-router combo (sometimes called a gateway device). If that device also has DHCP and DNS enabled, and your eero is in router mode rather than bridge mode, you end up with two NAT layers. The eero may receive a private IP from the ISP gateway and then hand out its own private IPs downstream. In some configurations, DNS queries get confused bouncing between the two devices.

Check your eero WAN IP:

  1. In the eero app, tap the menu, then Network settings > Advanced.
  2. Look at the WAN IP address. If it starts with 192.168.x.x or 10.x.x.x, you are behind double-NAT.

To resolve this, put your ISP modem-router into bridge mode (sometimes called "IP passthrough" or "DMZ mode"). The steps vary by ISP device, but generally you log into the ISP gateway at 192.168.0.1 or 192.168.100.1, find the WAN or broadband settings, and enable bridge/passthrough mode pointed at the eero's MAC address. After this, the eero gets the public IP directly and handles all routing and DNS without interference.

Step 5: Flush DNS Cache on Individual Devices

Even after fixing the eero-side DNS settings, individual devices may still be serving bad responses from their local DNS cache. Flush the cache on each affected device:

Windows:

ipconfig /flushdns

macOS (Sonoma, Ventura, Monterey):

sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

Linux (systemd-resolved):

sudo systemd-resolve --flush-caches

Android / iOS: Toggle airplane mode on and off, or forget and reconnect to the Wi-Fi network. There is no direct cache-flush command on mobile without root access.

Step 6: Check for Firmware Issues

eero pushes firmware updates automatically, but sometimes a recent update introduces a regression that breaks DNS in specific configurations. Check your eero firmware version and compare it against the latest available.

  1. In the eero app, tap Menu > Network settings > eero labs (or your gateway node's name).
  2. Scroll to the bottom to see the current firmware version.
  3. Check the eero community forums or Amazon's release notes for known DNS-related bugs in that version.

If a bad firmware update is confirmed as the cause, your options are limited since eero does not allow manual firmware downgrades. The practical workaround is to set a reliable custom DNS server (step 2) and wait for Amazon to push a corrective update. You can also contact eero support and report the issue, which helps flag it for faster patching.

Step 7: Factory Reset as a Last Resort

If none of the above steps resolve the issue, a corrupted eero configuration database may be the cause. A factory reset wipes all settings and forces a fresh setup.

  1. In the eero app, go to Menu > Network settings > Reset network.
  2. Choose Reset and remove eeros.
  3. Confirm and wait for the process to complete.
  4. Set up your eero network from scratch, entering your custom DNS servers during setup or immediately after.

Note that this removes all device profiles, eero Secure settings, and port forwarding rules. Take a screenshot of any custom configurations before proceeding.

Verifying the Fix

Once you have applied a fix, verify it properly rather than just loading a website (browsers cache aggressively and can give false positives).

# Check which DNS server your eero is actually using nslookup google.com # The "Server:" line in the output should show your eero's LAN IP # and the resolution should complete in under 100ms # Test with a specific public resolver to bypass eero entirely nslookup google.com 1.1.1.1 # On Linux/macOS, check full resolution chain dig +trace google.com

You can also use the DNS Lookup tool to run a real-time query against multiple global resolvers and confirm your domains are resolving correctly from outside your network.

Preventing eero DNS Problems in the Future

  • Always set custom DNS servers. Never rely on ISP-assigned DNS. Set 1.1.1.1 and 8.8.8.8 as your primary and secondary in the eero app. ISP DNS is frequently slow and occasionally broken.
  • Keep eero Secure filters minimal. Only enable content filter categories you genuinely need. Each additional filter layer adds latency and potential false-positive breakage.
  • Avoid double-NAT. If your ISP device supports bridge mode, use it. Double-NAT is the source of a disproportionate number of eero support cases.
  • Monitor eero's status page. Amazon maintains a service health page for eero cloud services. Bookmark it. When eero's backend is having issues, your local troubleshooting will go nowhere until they resolve it on their end.
  • Set up a secondary DNS monitor. Tools like UptimeRobot can send you an alert if your DNS resolution fails. A simple HTTP monitor hitting a domain you control will tell you within minutes if something breaks again.

When It Is Not Your eero

Sometimes what looks like an eero DNS problem is actually upstream with your ISP or with the authoritative DNS of a specific domain. If only one or two domains fail to resolve while everything else works, the issue is likely on the domain owner's side, not your eero. You can confirm this by querying a public resolver directly:

dig failingdomain.com @8.8.8.8 dig failingdomain.com @1.1.1.1

If both queries fail even with public resolvers, the problem is with that domain's DNS infrastructure, and there is nothing you can do locally to fix it. If the queries succeed with public resolvers but fail on your eero, that brings you back to the eero-side fixes above.

Summary

eero DNS failures almost always fall into one of four buckets: the eero gateway needs a restart, the upstream or custom DNS server settings are wrong, eero Secure filtering is too aggressive, or a double-NAT configuration is causing interference. Work through the steps above in order, verify each fix with a real DNS query rather than just a browser test, and set custom DNS servers to prevent the most common failure modes from recurring. Your eero is a solid piece of hardware. DNS configuration is where most of its reliability issues originate, and all of them are fixable.