novox/hq
6
0
Fork 0
Code Issues 5 Pull Requests 4 Releases Wiki Activity

ADR 0194: the mesh has one resolver, and every node asks it for the mesh's names #326

Merged
jschoubben merged 3 commits from decision/0194-the-mesh-has-one-resolver into main 2026-10-03 19:51:04 +00:00
Conversation 0 Commits 3 Files Changed 5
+191 -5
jschoubben commented 2026-10-03 19:21:49 +00:00
Owner
Copy Link
Copy Source
  • One mesh-scoped seat mesh-resolver (capacity 1) on the node every tunnel converges on; holds each node's internal domain; listens on the private network only.
  • Each node's node-resolver-config routes only the mesh suffix to it (systemd-resolved as routing stub); public names stay with public resolvers.
  • Containers: the runtime's dns names mesh-resolver, which forwards public names for them (stated as the one place a public name passes through the mesh).
  • node-dns-resolver retired with every per-node copy (zones file, hosts region).
  • A LAN's resolver is not the mesh's; a router pointing at a node is moved first.
  • Migration order fixed in four steps.

Narrows ADR 0121 (marked). Amends connectivity §2 (new subsection + open item) and the seats table (status back to in-progress). records/index/cycle pass.

- One mesh-scoped seat `mesh-resolver` (capacity 1) on the node every tunnel converges on; holds each node's internal domain; listens on the private network only. - Each node's `node-resolver-config` routes only the mesh suffix to it (systemd-resolved as routing stub); public names stay with public resolvers. - Containers: the runtime's `dns` names `mesh-resolver`, which forwards public names for them (stated as the one place a public name passes through the mesh). - `node-dns-resolver` retired with every per-node copy (zones file, hosts region). - A LAN's resolver is not the mesh's; a router pointing at a node is moved first. - Migration order fixed in four steps. Narrows ADR 0121 (marked). Amends connectivity §2 (new subsection + open item) and the seats table (status back to in-progress). records/index/cycle pass.
jschoubben added 1 commit 2026-10-03 19:21:49 +00:00
ADR 0194: the mesh has one resolver, and every node asks it for the mesh's names 1de4a5f25e 
Every resolution fault found on 2026-10-03 was a per-node copy disagreeing with the truth: a hosts
file read once, an operator's old line beside the mesh's, a node's resolver lent to a LAN. Every
tunnel already converges on one node. Retires node-dns-resolver for a mesh-scoped mesh-resolver;
nodes route only the mesh's suffix to it. Narrows 0121; amends connectivity §2 and the seats.
jschoubben added 1 commit 2026-10-03 19:50:36 +00:00
ADR 0194: why every node needs a stub, and the systemd-resolved module that provides it 6b6ff76a19
jschoubben merged commit 577ddf0089 into main 2026-10-03 19:51:04 +00:00
jschoubben deleted branch decision/0194-the-mesh-has-one-resolver 2026-10-03 19:51:04 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/hq#326