mbox series

[0/2] Fix DNS-over-TLS after changing DNS settings (#14781)

Message ID 20261113134243.382773-1-antonio@mandelbit.com
Headers
Series Fix DNS-over-TLS after changing DNS settings (#14781) |

Message

Antonio Quartulli 13 Nov 2026, 1:42 p.m. UTC 
Enabling DNS-over-TLS in dns.cgi breaks DNS until knot-resolver is
restarted: a reload doesn't restart the kresd workers, which only set up
TLS forwarders at startup.

Also, changes to the server list weren't applied at all.

Patch 1 adds a force-reload (rolling restart of the workers), patch 2
uses it in dns.cgi. The other reload callers are unchanged.
With a single worker, each save causes a sub-second DNS gap.

Files to ship: /srv/web/ipfire/cgi-bin/dns.cgi,
/etc/rc.d/init.d/knot-resolver, /usr/local/bin/dnsctrl

Antonio Quartulli (2):
  knot-resolver: Add force-reload
  dns.cgi: Force a reload after every change

 html/cgi-bin/dns.cgi                 | 7 ++++---
 src/initscripts/system/knot-resolver | 9 ++++++++-
 src/misc-progs/dnsctrl.c             | 7 +++++++
 3 files changed, 19 insertions(+), 4 deletions(-)