cmd/cli: skip upstream.os healthcheck when WFP loopback protect enabled

When WFP loopback protect is active, the upstream.os healthcheck will
always fail because an external WFP block filter is interfering with
plain DNS. This demotes those expected failures to debug level and
returns errOsHealthcheckSuppressed so the recovery loop treats them
as non-fatal, eliminating the log spam described in #526.
This commit is contained in:
Codescribe
2026-05-06 04:47:34 -04:00
committed by Cuong Manh Le
parent 81aa6b237b
commit 1735d3d55b
4 changed files with 43 additions and 4 deletions
+4
View File
@@ -1742,3 +1742,7 @@ func (p *prog) forceReloadPFMainRuleset() {
mainLog.Load().Info().Msg("DNS intercept: force reload — pf ruleset and anchor reloaded successfully")
}
// osHealthcheckSuppressed always returns false on darwin — WFP loopback
// protect (the trigger for suppression) is Windows-only.
func (p *prog) osHealthcheckSuppressed() bool { return false }