the bridge resolver answers other record types for its own names locally instead of waiting on an upstream
This commit is contained in:
parent
4876acd02a
commit
89bbeb9757
1 changed files with 48 additions and 13 deletions
|
|
@ -127,7 +127,15 @@ when it runs authelia, and `hive-collector.hive` on every hive
|
|||
is reachable, and where the hive's own collector listens). Note forge and
|
||||
matrix are swarm-domain names, not sub-domains of `<hive-domain>`: a swarm
|
||||
runs one forge and one homeserver, so their names belong to the swarm rather
|
||||
than to whichever hive happens to host them. dnsmasq forwards everything else to the host's
|
||||
than to whichever hive happens to host them.
|
||||
|
||||
Every domain answered this way is also `local=` for dnsmasq, so the other
|
||||
record types (AAAA, TXT, MX, HTTPS) for those names get an empty answer from
|
||||
dnsmasq itself instead of waiting on the host's upstream resolver. Without it,
|
||||
dnsmasq 2.86 and later send them upstream, and a host whose upstream doesn't
|
||||
answer leaves each lookup to its client's own timeout.
|
||||
|
||||
dnsmasq forwards everything else to the host's
|
||||
own resolvers: it runs on the host and reads the host's
|
||||
`/etc/resolv.conf` directly. Containers don't need to know the
|
||||
upstream — they query the bridge IP and dnsmasq does the right thing
|
||||
|
|
|
|||
Loading…
Reference in a new issue