[GH-ISSUE #202] PLUS: site vpn -- ensure devices route dns over gateway #67

New issue

Open

opened 2026-03-04 01:34:33 +03:00 by kerem · 1 comment

kerem commented

2026-03-04 01:34:33 +03:00

Owner

Originally created by @lts-rad on GitHub (Oct 5, 2023).
Original GitHub issue: https://github.com/spr-networks/super/issues/202

Originally assigned to: @lts-rad on GitHub.

double check that devices routed over a site VPN will also make dns requests over that site VPN.

Today they use destination routing to use the uplink as a gateway but might still have SPR be the DNS server. In this case, the DNS should be also router through the gateway.

Unlike a traditional vpn setup where the device has a vpn client, and configures its own dns, the device is unaware it is being site forwarded. thats why dns needs to also be pushed out over the site vpn as the dns queries would leak the ip address of SPR

Originally created by @lts-rad on GitHub (Oct 5, 2023). Original GitHub issue: https://github.com/spr-networks/super/issues/202 Originally assigned to: @lts-rad on GitHub. double check that devices routed over a site VPN will also make dns requests over that site VPN. Today they use destination routing to use the uplink as a gateway but might still have SPR be the DNS server. In this case, the DNS should be also router through the gateway. Unlike a traditional vpn setup where the device has a vpn client, and configures its own dns, the device is unaware it is being site forwarded. thats why dns needs to also be pushed out over the site vpn as the dns queries would leak the ip address of SPR

kerem commented

2026-03-04 01:34:34 +03:00

Author

Owner

@lts-rad commented on GitHub (Oct 5, 2023):

ui fi: uplink view should display site vpns.

@lts-rad commented on GitHub (Oct 5, 2023): ui fi: uplink view should display site vpns.