Thomas Eizinger
Thomas Eizinger
My preliminary feature design suggestion is: - Allow users to configure a new resource type that is called a "search domain" which is essentially a `*.domain` DNS resource. - Clients...
> Setting a searchDomain in the macOS client will apply it to the DNS configuration when the tunnel comes up. This doesn't work without an accompanying wildcard DNS resource that...
Sounds good! I'll code this up for the clients. We can default to no search-domain until the portal ships this.
> I could have missed something in this conversation, in `/etc/resolv.conf`(or platform-equivalent) we replace the non-firezone search domains? > > I think It'd make sense that we try to capture...
> Yeah I don't think it can hurt to pass ICMP messages along properly. No comment on the approach, will defer to others. I am hoping for this to resolve...
I really want to test this using `tunnel_test` but our current `ip-packet` crate is a bit of a mess. I've started to clean that up by replacing it bit-by-bit with...
@conectado Do you have some commits that could be pushed onto this PR?
> > @conectado Do you have some commits that could be pushed onto this PR? > > I quickly threw #6654 together, to see if it fixed the bug but...
> Curious to test this. Still working on fixing the tests but the actual functionality should hold I think.
> This surfaces an interesting edge-case: If an admin configures an upstream DNS and a client doesn't have a compatible IP stack, this will result in the client having **no**...