[GH-ISSUE #1590] Regression in 0.21: DoT forwarding from cloudflare doesn't work #705

New issue

Closed

opened 2026-03-15 23:54:32 +03:00 by kerem · 2 comments

kerem commented

2026-03-15 23:54:32 +03:00

Owner

Originally created by @msrd0 on GitHub (Nov 18, 2021).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1590

Describe the bug

When trying to run named as a DoT forwarder from cloudflare, no records are returned.

To Reproduce

Use the following config and run named with dns-over-rustls feature enabled:

listen_port = 5053

[[zones]]
zone = "."
zone_type = "Forward"

[zones.stores]
type = "forward"

[[zones.stores.name_servers]]
socket_addr = "1.1.1.1:853"
protocol = "tls"
tls_dns_name = "cloudflare-dns.com"
trust_nx_responses = false

Expected behavior

I expect named to return records.

System:

OS: ArchLinux
Version: Rolling Release
Architecture: amd64
rustc version: 1.56 (from ArchLinux repository)

Version:
Crate: bin
Version 0.21.0-alpha.4

Additional context

Log: https://gist.github.com/msrd0/4d286cbe8b4d242b89d79be541c96851

Originally created by @msrd0 on GitHub (Nov 18, 2021). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1590 **Describe the bug** When trying to run named as a DoT forwarder from cloudflare, no records are returned. **To Reproduce** Use the following config and run named with `dns-over-rustls` feature enabled: ```toml listen_port = 5053 [[zones]] zone = "." zone_type = "Forward" [zones.stores] type = "forward" [[zones.stores.name_servers]] socket_addr = "1.1.1.1:853" protocol = "tls" tls_dns_name = "cloudflare-dns.com" trust_nx_responses = false ``` **Expected behavior** I expect named to return records. **System:** - OS: ArchLinux - Version: Rolling Release - Architecture: amd64 - rustc version: 1.56 (from ArchLinux repository) **Version:** Crate: bin Version 0.21.0-alpha.4 **Additional context** Log: https://gist.github.com/msrd0/4d286cbe8b4d242b89d79be541c96851

kerem closed this issue

2026-03-15 23:54:38 +03:00

kerem commented

2026-03-15 23:54:43 +03:00

Author

Owner

@msrd0 commented on GitHub (Nov 18, 2021):

Workaround: Add this to your config

[zones.stores.options]
try_tcp_on_error = true

@msrd0 commented on GitHub (Nov 18, 2021): **Workaround**: Add this to your config ```toml [zones.stores.options] try_tcp_on_error = true ```

kerem commented

2026-03-15 23:54:48 +03:00

Author

Owner

@bluejekyll commented on GitHub (Nov 19, 2021):

Thank you for finding and reporting this issue.

@bluejekyll commented on GitHub (Nov 19, 2021): Thank you for finding and reporting this issue.

kerem referenced this issue

2026-03-16 02:16:31 +03:00

[PR #712] [MERGED] Address #705 #1625