Skip to content

[Request]: Minimal nftables support to enable DNS queries on port other than :53 #904

Description

@l-hedgehog

Feature or enhancement request details

From #436 and apple/container#1809 , I understand there's a desire to let the containers resolve DNS queries w/o relying on the mDNSResponder currently available at gateway IP on port 53. Since it's impossible to assign a port in the nameserver line of /etc/resolv.conf, we need some other way to make that happen.

When I was testing a custom vminit image where this was enabled with eBPF programs (connect4/sendmsg4/recvmsg4), I read about the possibility of implement the nettlink[sic] support required to do the rule programming in apple/container#838, and decided to give it a try, and I have a work set of patches now.

Code of Conduct

  • I agree to follow this project's Code of Conduct

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions