HA DNS Question / Problem

[virtualbitzz]

I’m using DHCP for HA and have my two domain controllers specified and google as a tertiary. I’m using the HA VM.

DNS Server 1
DNS Server 2
8.8.8.8

Whenever I try to have HA resolve DNS from zones hosted on my domain controllers it fails. It seems like HA is doing its own recursive lookups and ignoring my specified DNS servers. Is there a way to configure forwarders?

[tom_l]

Did you set the DNS servers in System > Settings > Network ?

[virtualbitzz]

no, because I’m using DHCP. If I run

ha dns info (can’t recall the syntax exactly)

It shows the DNS servers learned through DHCP.

[CentralCommand (Mike)]

Is the zone you’re trying to use .local?

[virtualbitzz]

yes it is a .local TLD

[CentralCommand (Mike)]

Right that won’t work. .local is reserved for multicast DNS. Queries for a .local name are not passed to any DNS resolver, they are handled as multicast DNS requests. My post here explains why this change was made:

Local DNS!

Yes so that actually won’t work anymore. People submitted CVE-2020-36517 saying that we were forwarding local domain names inappropriately so we did an audit. One of the things we realized that we were in fact handling .local poorly. This was changed in this PR: We looked at what systemd-resolved did for handling LLMNR and MDNS names and noticed that it flatly refused to forward these types of queries to resolvers as they are reserved for LLMNR and MDNS, you can see that code here. So now we d…

Note that only .local and single-name hostnames are given this special treatment because they are reserved for MDNS and LLMNR respectively. You are welcome to pick any other TLD for local use and HA will pass queries for it to your local resolver like usual.

[virtualbitzz]

Son of a *#(&@!

Thanks for the detailed response!