dns proxy: port DNS64 synthesis to master

Port the reviewed DNS64 behavior while preserving master's context-aware
resolver, cache, logging, and Firewall Mode flow.
This commit is contained in:
Dev Scribe
2026-09-03 13:58:24 +07:00
committed by Cuong Manh Le
parent d8994cc7d8
commit dd77d865b6
6 changed files with 979 additions and 34 deletions
+4
View File
@@ -174,6 +174,10 @@ type prog struct {
// authentication without tearing down WFP/pf filters.
recoveryBypass atomic.Bool
// dns64 tracks DNS64/NAT64 synthesis state for IPv6-only networks
// without client-side 464XLAT. See cmd/cli/dns64.go.
dns64 dns64State
// interceptDNSTargetService names the macOS network service on which
// ctrld set a temporary DNS target; interceptDNSTargetSetValue records the
// exact value. Both are guarded by interceptDNSTargetMu.