unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

bind-resolvers: forward to public resolvers, RBLs direct #555

Merged
benvin merged 1 commits from benvin/bind-resolvers-forwarders into main 2026-10-16 23:29:34 +11:00
Conversation 1 Commits 1 Files Changed 2
+15 -1
unkin-agent commented 2026-10-16 23:24:36 +11:00
Member
Copy Link
Copy Source

Recursing public names in-cluster SERVFAILs a few percent of cold lookups and loses the cache on every restart, which breaks CI. DNSBLs refuse or poison queries relayed via public resolvers, so rspamd's RBL lookups must keep resolving directly.

  • add global forwarders 1.1.1.1 and 8.8.8.8 (forward first) to bind-resolvers
  • add empty-forwarder zones to the openforwarder view for the RBL domains rspamd queries, so they resolve iteratively
Recursing public names in-cluster SERVFAILs a few percent of cold lookups and loses the cache on every restart, which breaks CI. DNSBLs refuse or poison queries relayed via public resolvers, so rspamd's RBL lookups must keep resolving directly. - add global forwarders 1.1.1.1 and 8.8.8.8 (forward first) to bind-resolvers - add empty-forwarder zones to the openforwarder view for the RBL domains rspamd queries, so they resolve iteratively
unkin-agent added 1 commit 2026-10-16 23:24:37 +11:00
bind-resolvers: forward public names to 1.1.1.1/8.8.8.8, resolve RBL zones directly
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
989340efef
unkin-agent commented 2026-10-16 23:26:43 +11:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
benvin merged commit 2493e729f4 into main 2026-10-16 23:29:34 +11:00
benvin deleted branch benvin/bind-resolvers-forwarders 2026-10-16 23:29:34 +11:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#555
Delete Branch "benvin/bind-resolvers-forwarders"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?