- Add new dot node under upstream DNS server config (shared include, reused in both paths):
- service dns forwarding name-server <ip> dot
- service dns forwarding domain <domain> name-server <ip> dot
- Keep using the common port-number include (no duplicated port XML node).
- Refactor upstream canonicalization in service_dns_forwarding.py:
- default port 53
- if dot is set and no port is provided, default to 853
- explicit port is respected (including non-853)
- Remove the previous validation that rejected dot when port was not 853.
- Disable implicit recursor behavior port 853 => DoT by setting:
- dot-to-port-853=no in generated recursor.conf
- Extend smoketests for:
- global upstream dot
- domain upstream dot
- custom DoT ports
- dot-to-port-853=no rendering check
Description
Description
Details
Details
- Version
- -
- Is it a breaking change?
- Config syntax change (migratable)
- Issue type
- Feature (new functionality)