Page MenuHomeVyOS Platform
Create Task
Maniphest T7333

FQDN resolver uses IPv4 cache for failed IPv6 resolution
Closed, ResolvedPublicBUG
Actions

Description

Reported in Slack.

If IPv4 query is cached in domain resolver, the ipv4 cached addresses will be returned if ipv6 resolution fails.

Workaround for 1.4.2 and older: del firewall global-options resolver-cache

Details

Version
1.4, 1.5
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

sarthurdev created this task.Apr 8 2025, 8:33 PM
sarthurdev changed the task status from Open to In progress.
sarthurdev claimed this task.
sarthurdev changed the task status from In progress to Needs testing.Apr 8 2025, 8:40 PM

PR: https://github.com/vyos/vyos-1x/pull/4440

sarthurdev moved this task from Need Triage to Backport Candidates on the VyOS Rolling board.Apr 8 2025, 8:41 PM
sarthurdev triaged this task as Normal priority.Apr 8 2025, 8:50 PM
sarthurdev updated the task description. (Show Details)
pasik subscribed.Apr 9 2025, 6:26 AM
sarthurdev mentioned this in rVYOSONEX8ca2d3486e2c: firewall: T7333: Use separate cache keys per inet family.Apr 14 2025, 5:20 PM
Restricted Repository Identity mentioned this in rVYOSONEX290de0c6d143: Merge pull request #4440 from sarthurdev/fqdn_cache.Apr 14 2025, 5:20 PM
sarthurdev moved this task from Open to Finished on the VyOS 1.5 Circinus board.Apr 25 2025, 2:01 PM
dmbaturin closed this task as Resolved.May 21 2025, 3:00 PM
dmbaturin moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
dmbaturin moved this task from Backport Candidates to Completed on the VyOS Rolling board.
dmbaturin edited projects, added VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.Jul 9 2025, 12:17 PM
dmbaturin mentioned this in 1.4.3.Jul 17 2025, 8:18 AM