You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
routing {
# According to the request of dns query, decide to use which DNS upstream.
# Match rules from top to bottom.
request {
qname(suffix:corp1.com, suffix:corp2.com, suffix:corp3.com) -> asis
# fallback is also called default.
fallback: alidns
}
# According to the response of dns query, decide to accept or re-lookup using another DNS upstream.
# Match rules from top to bottom.
response {
# Trusted upstream. Always accept its result.
upstream(googledns) -> accept
# Possibly polluted, re-lookup using googledns.
ip(geoip:private) && !qname(geosite:cn) -> googledns
# fallback is also called default.
fallback: accept
}
}
These domain names(suffix:corp1.com, suffix:corp2.com, suffix:corp3.com) are internal company domains and will actually follow the response ip(geoip:private) && !qname(geosite:cn) -> googledns, which is normal but unnecessary.
There are two solutions, one is the cumbersome version:
The second one(currently not supported, it's just as described in the issue title):
upstream(asis) -> accept # level=fatal msg="failed to build DNS response routing: failed to parse 'upstream(asis, googledns)': upstream "asis" not found; please define it in "dns.upstream""
Is it possible that asis is an upstream after all since it is considered built-in?
Potential Benefits
More convenient and reasonable.
The text was updated successfully, but these errors were encountered:
Improvement Suggestion
Consider the following setup:
These domain names(
suffix:corp1.com, suffix:corp2.com, suffix:corp3.com
) are internal company domains and will actually follow the responseip(geoip:private) && !qname(geosite:cn) -> googledns
, which is normal but unnecessary.There are two solutions, one is the cumbersome version:
The second one(currently not supported, it's just as described in the issue title):
Is it possible that
asis
is an upstream after all since it is considered built-in?Potential Benefits
More convenient and reasonable.
The text was updated successfully, but these errors were encountered: