~alpine/users

2 2

[alpine-user] Support request - Force DNS requests to go over TCP

Details
Message ID
<CAG_gbDAh05r6GUoSN3tUCGMzYt3kdZpshAFidRBHFgzBuTCebQ@mail.gmail.com>
Sender timestamp
1555074040
DKIM signature
missing
Download raw message
Hi all,

I've run into a situation where I need DNS resolution to always be over TCP
rather than UDP due to AWS dropping DNS packets frequently enough to be a
problem. On glibc based environments I can use the use-vc option in the
resolv.conf file.
http://man7.org/linux/man-pages/man5/resolv.conf.5.html
On Alpine this doesn't seem to be supported and I would love to hear any
suggestions about achieving this behaviour.

Feel free to CC me on this discussion

Many thanks,

-- 

Richard Finlay Tweed

-- 




Thought Machine Group a limited company registered in England & Wales.

Registered number: 11114277. 
Registered Office: 5 New Street Square, 
London EC4A 3TW 
<https://maps.google.com/?q=5+New+Street+Square,+London+EC4A+3TW&entry=gmail&source=g>.



The content of this email is confidential and intended for the recipient 
specified in message only. It is strictly forbidden to share any part of 
this message with any third party, without a written consent of the sender. 
If you received this message by mistake, please reply to this message and 
follow with its deletion, so that we can ensure such a mistake does not 
occur in the future.
Paul Bredbury <brebs@sent.com>
Details
Message ID
<1ef94f9fb4b10df8416e630e1dab988842dc84bf.camel@sent.com>
In-Reply-To
<CAG_gbDAh05r6GUoSN3tUCGMzYt3kdZpshAFidRBHFgzBuTCebQ@mail.gmail.com> (view parent)
Sender timestamp
1555148439
DKIM signature
missing
Download raw message
For any non-trivial DNS, I recommend to use Unbound.

If you really need TCP, it has an option:

tcp-upstream: <yes or no>  
Enable or disable whether the upstream queries use TCP only for transport. Default is no. Useful in tunneling scenarios.

On Fri, 2019-04-12 at 14:00 +0100, Richard Tweed wrote:
> I've run into a situation where I need DNS resolution to always be over TCP rather than UDP due to AWS dropping DNS packets frequently enough to be a problem. On glibc based environments I can use
> the use-vc option in the resolv.conf file. 
> http://man7.org/linux/man-pages/man5/resolv.conf.5.html
> On Alpine this doesn't seem to be supported and I would love to hear any suggestions about achieving this behaviour.



---
Unsubscribe:  alpine-user+unsubscribe@lists.alpinelinux.org
Help:         alpine-user+help@lists.alpinelinux.org
---
Details
Message ID
<CAG_gbDAeuKRGqgTRSUnqqpu6FQ8hqrNS-2ZpZJRarEFLs2o+Yw@mail.gmail.com>
In-Reply-To
<1ef94f9fb4b10df8416e630e1dab988842dc84bf.camel@sent.com> (view parent)
Sender timestamp
1555321584
DKIM signature
missing
Download raw message
Thanks, I'll check that out!

On Sat, 13 Apr 2019 at 10:40, Paul Bredbury <brebs@sent.com> wrote:

> For any non-trivial DNS, I recommend to use Unbound.
>
> If you really need TCP, it has an option:
>
> tcp-upstream: <yes or no>
> Enable or disable whether the upstream queries use TCP only for transport.
> Default is no. Useful in tunneling scenarios.
>
> On Fri, 2019-04-12 at 14:00 +0100, Richard Tweed wrote:
> > I've run into a situation where I need DNS resolution to always be over
> TCP rather than UDP due to AWS dropping DNS packets frequently enough to be
> a problem. On glibc based environments I can use
> > the use-vc option in the resolv.conf file.
> > http://man7.org/linux/man-pages/man5/resolv.conf.5.html
> > On Alpine this doesn't seem to be supported and I would love to hear any
> suggestions about achieving this behaviour.
>
>

-- 

Richard Finlay Tweed

-- 




Thought Machine Group a limited company registered in England & Wales.

Registered number: 11114277. 
Registered Office: 5 New Street Square, 
London EC4A 3TW 
<https://maps.google.com/?q=5+New+Street+Square,+London+EC4A+3TW&entry=gmail&source=g>.



The content of this email is confidential and intended for the recipient 
specified in message only. It is strictly forbidden to share any part of 
this message with any third party, without a written consent of the sender. 
If you received this message by mistake, please reply to this message and 
follow with its deletion, so that we can ensure such a mistake does not 
occur in the future.
Reply to thread Export thread (mbox)