The roster is the machines: each node's internal domain covers its routes (hq ADR 0191) #238

2026-10-03T13:39:09Z

jschoubben commented

2026-10-03 13:39:09 +00:00

Replaces #235's suffix filter, and goes further: the roster no longer carries routed names at all.

A node has one internal domain (<node>.internal); every route on it is a name under that domain (ADR 0151) and the resolver answers it with the per-node wildcard dnsmasq already has (address=/<node>.internal/<addr>). A node's public domains (one or more) are answered by public DNS. So routeNamesInTheMesh and catalogue.NamesServed (+ helpers, tests) are removed; .Names and .Machines stay as two fields for template compatibility and are now equal.

Verified live before the change: git.novox.internal, photos-api.novox.internal, plex.ace.internal, anything.shanks.internal all resolve via the wildcard on every node; all nodes resolve through local dnsmasq.

Tests, run with MESH_TEST_POSTGRES (throwaway postgres, as make check): new TestTheRosterNamesOnlyTheMachines passes; go vet clean. One failure — TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves (dnsmasq has no bus credential, issue 203) — fails identically on unmodified main.

Replaces #235's suffix filter, and goes further: the roster no longer carries routed names at all. A node has one internal domain (`<node>.internal`); every route on it is a name under that domain (ADR 0151) and the resolver answers it with the per-node wildcard dnsmasq already has (`address=/<node>.internal/<addr>`). A node's public domains (one or more) are answered by public DNS. So `routeNamesInTheMesh` and `catalogue.NamesServed` (+ helpers, tests) are removed; `.Names` and `.Machines` stay as two fields for template compatibility and are now equal. Verified live before the change: `git.novox.internal`, `photos-api.novox.internal`, `plex.ace.internal`, `anything.shanks.internal` all resolve via the wildcard on every node; all nodes resolve through local dnsmasq. Tests, run with `MESH_TEST_POSTGRES` (throwaway postgres, as `make check`): new `TestTheRosterNamesOnlyTheMachines` passes; `go vet` clean. One failure — `TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves` (dnsmasq has no bus credential, issue 203) — fails identically on unmodified main.

jschoubben added 1 commit 2026-10-03 13:39:09 +00:00

The roster publishes a route's internal name, never its public one (hq ADR 0191) e56f3aa1cb

NamesServed read a route's public `name` and plan.go then filtered by suffix — telling the mesh's
names from public ones by their spelling, when the mesh composed both itself. It now publishes the
`internal-name` it composed under the serving node (ADR 0151); the suffix filter is gone.

jschoubben changed title from ~~The roster publishes a route's internal name, never its public one (hq ADR 0191)~~ to The roster is the machines: each node's internal domain covers its routes (hq ADR 0191)

2026-10-03 14:10:17 +00:00

jschoubben added 1 commit 2026-10-03 14:10:17 +00:00

The roster is the machines: each node's internal domain covers its routes (hq ADR 0191) 11e4bc0ba1

The roster published routed names — public ones first, then (in this PR's first take) internal ones
told apart by suffix. Neither is needed: a node has one internal domain and every route on it is a
name under it, answered by the resolver's per-node wildcard; a node's public domains are public
DNS's. routeNamesInTheMesh and NamesServed are removed, and a test pins .Names to the machines.

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin fix/the-mesh-publishes-the-names-it-composed:fix/the-mesh-publishes-the-names-it-composed

git checkout fix/the-mesh-publishes-the-names-it-composed

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-controller#238