Thomas Eizinger 8bac75bd49 fix(connlib): forward PTR queries for non-resources (#6765) ...

When encountering a PTR query, `connlib` checks if the query is for a
Firezone-managed resource and resolve it to the correct IP. If it isn't
for a DNS resource, we should forward the query to the upstream
resolver.

This isn't what is currently happening though. Instead of forwarding the
query, we bail early from `StubResolver::handle` and thus attempt to
route the packet through the tunnel. This however fails because the DNS
query was targeted at `connlib`'s stub resolver address which never
corresponds to a resource IP.

When TRACE logs where activated, this resulted in several entries such
as

> Unknown resource dst=100.100.111.1

To ensure this doesn't regress, we now generate PTR and MX record
queries in `tunnel_test`. We don't assert the response of those but we
do assert that we always get a response. The inclusion of MX records
asserts that unknown query types get correctly forwarded.

Resolves: #6749.

2024-09-18 22:46:26 +00:00

..

proptest-regressions

chore(connlib): implement IP translation according to RFC6145 (#5364)

2024-06-14 21:33:07 +00:00

src

fix(connlib): forward PTR queries for non-resources (#6765)

2024-09-18 22:46:26 +00:00

Cargo.toml

refactor(connlib): remove pnet_packet (#6659)

2024-09-11 23:52:48 +00:00