c41349fd94
resolver: a reply marked recursion available from a root server's address stops the lookup (closes #300)
Rework, one point. The ruling (sneak/dnswatcher#300 (comment)) is that dnswatcher stops with the interception error and fails on such a network every time. As…
Review: pass.
Model: opus-5-5
ca26499c88
resolver: a root server's reply marked recursion available means interception (closes #300)
Ruling (sneak, 2026-10-16, in chat): A. PR 301 keeps only the part that spots a reply marked "recursion available" from a root server's address and stops with the plain error "this network…
sneak's check (sneak/dnswatcher#301 (comment)): from his machine, a.root-servers.net answers SERVFAIL with ra set over both UDP and TCP. A real root…
Ruling (sneak, 2026-10-16, sneak/dnswatcher#301 (comment)): on a network that filters or alters DNS, the tests should fail. PR 301's retry over TCP, which…
script/cibuild on a fresh clone of next (adc8131) passes on this host.
Cause. Something on your network answers DNS queries sent to port 53 at any address itself, instead of passing…
@sneak here is what the upaas app needs, read from the config code on next, which is what you will be deploying.
Environment variables
Only DNSWATCHER_TARGETS is required. A value…
Ruling (sneak, 2026-10-16): keep gorm for now. The binary already builds with cgo off (PR 550); find a way to turn cgo off in tests as well.
Next: a webhooker session finds how the tests…
Ruling (sneak, 2026-10-16): yes to all three. Besides Go's compile cache, check builds may keep Go's downloaded modules, golangci-lint's analysis cache, and the layer that installs system…