Thomas Eizinger 4117639cf4 fix(connlib): reply with SERVFAIL on DNS query errors (#5263) ...

Currently, we simply drop a DNS query if we can't fulfill it. Because
DNS is based on UDP which is unreliable, a downstream system will
re-send a DNS query if it doesn't receive an answer within a certain
timeout window.

Instead of dropping queries, we now reply with `SERVFAIL`, indicating to
the client that we can't fulfill that DNS query. The intent is that this
will stop any kind of automated retry-loop and surface an error to the
user.

Related: #4800.

---------

Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Reactor Scram <ReactorScram@users.noreply.github.com>

2024-06-08 02:12:46 +00:00

..

lib.rs

fix(connlib): reply with SERVFAIL on DNS query errors (#5263)

2024-06-08 02:12:46 +00:00

make.rs

fix(connlib): reply with SERVFAIL on DNS query errors (#5263)

2024-06-08 02:12:46 +00:00