Comments (3)
It is possible to list the IP-addresses to use for upstream and downstream, with outgoing-interface: and interface: statements. If you only list IPv4 or only IPv6 addresses for them it uses only that protocol to make connections. Perhaps this can provide a workaround for this feature for you?
from unbound.
The suggestion was sparked by #35. Once that is sorted it probably does not matter any more.
It is possible to list the IP-addresses to use for upstream and downstream, with outgoing-interface: and interface: statements.
Of course, missed that logic - however, I would prefer to retain randomness for outgoing queries to counter spoofing.
from unbound.
Okay! Outgoing queries are still randomized if you do that. It uses the available addresses and destinations for the randomization. I mean, it randomizes over the compatible destinations. And if you give more than one outgoing-interface of that address family (several IPv6 addresses, for example) it'll randomize over the source as well, whilst keeping the IPv4/6 correct. (Just a note, because you wanted to keep the randomization, this is how you get that) :-)
from unbound.
Related Issues (20)
- TCP returns, UDP does not (Docker, gluetun) HOT 3
- unbound library is not storing result.data in the response structure for ANY requests HOT 1
- Trouble resolving some subdomains for the second time HOT 3
- unknown keyword 'interface-tag' HOT 1
- config.h.in~ backup file in release tar balls HOT 1
- [FR] RPZ does not handle HTTP redirects
- Unbound local-zone or local-data doesn't work if the domain starts with number HOT 3
- [FR] distinguish Do53, DoT and DoH in the logs HOT 6
- DNS response to negative cache ttl is not rfc compliant HOT 10
- cname is not cached directly HOT 2
- doc: default number of outgoing ports without libevent HOT 1
- CNAME in local-data: is not resolved HOT 1
- unbound 1.19 cause FreeBSD 14.0-RELEASE panic HOT 9
- Improve errors for non-HTTP/2 DoH clients HOT 1
- dump_cache truncates large records
- QNAME Minimization Implementation Inquiry HOT 3
- Sha1 runtime insecure change was incomplete HOT 1
- [FR] More prefetch options HOT 1
- Resolving sas.com with dnssec-validation fails though signed delegations seem to be (mostly) correct HOT 1
- [FR] Remove unbound as a gnutls dependency in homebrew
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from unbound.