Mercurial > repos > other > Puppet
diff hiera.yaml @ 351:78a9c5946154
Handle DNS64 locally to fix DNSSEC issues
Unbound passes a "DO" (DNSSEC Okay) flag to upstream servers,
which means they don't synthesise DNS64 entries correctly for
some domains.
Doing this loses us redundancy (if :82: goes down we're DNS-less
until a manual change) but at least we can resolve more DNS now
author | IBBoard <dev@ibboard.co.uk> |
---|---|
date | Fri, 02 Oct 2020 20:16:04 +0100 |
parents | ea72ea1f7320 |
children | 2c3e745be8d2 |