diff --git a/elixir/apps/web/lib/web/live/settings/dns.ex b/elixir/apps/web/lib/web/live/settings/dns.ex index 9b6977c21..2509caebf 100644 --- a/elixir/apps/web/lib/web/live/settings/dns.ex +++ b/elixir/apps/web/lib/web/live/settings/dns.ex @@ -34,12 +34,12 @@ defmodule Web.Settings.DNS do DNS <:help> - Configure the default resolver used by connected Clients in your Firezone account. - Queries for defined Resources will always + Configure the default resolver used by connected Clients. + Queries for Resources will always use Firezone's internal DNS. - All other queries will use the resolver below if configured. - If no resolver is configured, the client's default system resolver will be used. -

+ All other queries will use the DNS servers configured here or the Client's + system resolvers if no servers are configured. +

<.website_link path="/kb/deploy/dns"> Read more about configuring DNS in Firezone. @@ -88,6 +88,12 @@ defmodule Web.Settings.DNS do +

+ Note: + It is highly recommended to to specify both + IPv4 and IPv6 addresses when adding custom resolvers. Otherwise, Clients without IPv4 + or IPv6 connectivity may not be able to resolve DNS queries. +

<.submit_button> Save diff --git a/website/src/app/kb/deploy/dns/readme.mdx b/website/src/app/kb/deploy/dns/readme.mdx index 6fdbaf3a4..f0b8562cd 100644 --- a/website/src/app/kb/deploy/dns/readme.mdx +++ b/website/src/app/kb/deploy/dns/readme.mdx @@ -94,9 +94,15 @@ Go to `Settings -> DNS` and enter IPv4 and/or IPv6 servers to use as fallback resolvers. Firezone Clients will use these servers in the order they are defined for any query that doesn't match a Resource the user has access to. + + When setting custom upstream resolvers, it is **highly** recommended to + configure **both** an IPv4 and IPv6 option. Otherwise, a Client that has only + IPv4 or IPv6 connectivity may not be able to resolve DNS queries. + + Firezone Clients support only DNS over UDP/53 at this time. DNS-over-TLS and - DNS-over-HTTPS upstream servers are not supported yet. + DNS-over-HTTPS upstream servers are not yet supported. If no custom resolvers are configured, Firezone Clients will fall back to the