mirror of
https://github.com/mageddo/dns-proxy-server.git
synced 2026-04-25 09:25:56 +03:00
[GH-ISSUE #478] HOSTNAMES Env dont work if kernel option ipv6.disable=1 #170
Labels
No labels
bug
confirmed
discussion
duplicate
enhancement
feature
feature-request
not-planned
pull-request
secondary-feature
stale
triage
waiting-feedback
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/dns-proxy-server-mageddo#170
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @sh3bang on GitHub (Jun 19, 2024).
Original GitHub issue: https://github.com/mageddo/dns-proxy-server/issues/478
http://mageddo.github.io/dns-proxy-server/latest/en/2-features/docker-solving/#hostnames-env
Note: noRemoteServers = false
@mageddo commented on GitHub (Jun 19, 2024):
@sh3bang does you have a minimal example Of How to create a Linux env with that kernel option?
@sh3bang commented on GitHub (Jun 19, 2024):
i am wondering how this answer can happen:
NXDOMAIN should be No Answer because domain is existing, but Zone have no AAAA record
DPS is obviously mixing none existing DNS Zones on remote DNS with existing Zones on local/DPS Server by querying always the upstream DNS first.
Correct DNS answer (just ask for A):
Also correct (A existing, but no AAAA):
DPS config.json
docker-compose.yml
if you are disable IPv6 completely nothing work as expected ;)
@mageddo commented on GitHub (Jun 19, 2024):
So the behavior below is the one you understand as the unexpected behavior?
@mageddo commented on GitHub (Jun 19, 2024):
I didn't get if "if you are disable IPv6 completely nothing work as expected ;)" suggests another unexpected behavior which wasn't explained, in this case can you describe what happens in this scenario?
@mageddo commented on GitHub (Jun 19, 2024):
That's the expected behavior because NSLOOKUP query for both A and AAAA records at the same execution
This result says "I found answer for A but didn't for the AAAA"
This another one says "I found no answer at all"
@mageddo commented on GitHub (Jun 19, 2024):
The A and AAAA are two different queries made to DPS from the nslookup client, so yes, DPS can solve A record from docker,local db and solve AAAA from the remote solver.
Actually I understand that as OK.
The hostname entry existence at the docker solver is not enough criterium to make DPS stop the resolution and don't forward the query to the remote solver.
Maybe this current criterium can be questionable, maybe if the hostname entry exists at the docker solver and even if no IP exists DPS should stop the resolution and answer NXDOMAIN
@github-actions[bot] commented on GitHub (Aug 7, 2024):
This issue is stale because it has been waiting-feedback for 15 days with no activity.
@github-actions[bot] commented on GitHub (Aug 15, 2024):
This issue was closed because it has been inactive for 7 days since being marked as stale, you can reopen it at any time.
@aricooperdavis commented on GitHub (Nov 26, 2024):
I am requesting that this be re-opened, as currently the resolver doesn't meet DNS standards. The logic should be:
Here are the relevant RFC standards:
Here are some other sources that indicate that this is incorrect and problematic behaviour (because of NXDOMAIN response cacheing):
@mageddo commented on GitHub (Nov 27, 2024):
@aricooperdavis
Thanks for the evidences, it makes sense for me, creating #611 to treat this behavior.
@cmiguelcabral commented on GitHub (Dec 19, 2025):
I'm also experiencing the same issue when resolving docker containers.
The only way to have it working is to enable and configure IPv6 on docker, othewise we get a response like this:
I'm guessing the error
** server can't find artifactory.docker: NXDOMAINhappens because it cannot find the container's IPv6. I'm saying this because if IPv6 is enabled, we get both IPs instead of an IPv4 and an error.Some services, like nginx, don't work this way.
Can we just turn off IPv6 in dns-proxy-server?
I don't want to enable and configure IPv6 on docker just to have this working...