f113b2051b
CloudFlare's public recursive DNS resolvers are available at multiple anycast addresses. For some reason 1.1.1.1 is unreachable from parts of OVH's BHS1 region, but 1.0.0.1 seems to be consistently reachable. Swap this for improved reliability. Depends-On: https://review.opendev.org/655687 Change-Id: I403961828f4af3f121a6fa2193a933c9fc4a7bc7
1.6 KiB
1.6 KiB
An ansible role to dynamically configure DNS forwarders for the
unbound caching service. IPv6 will be preferred when there
is a usable IPv6 default route, otherwise IPv4.
Note
This is not a standalone unbound configuration role. Base setup is
done during image builds in
project-config:nodepool/elements/nodepool-base/finalise.d/89-unbound;
here we just do dynamic configuration of forwarders based on the
interfaces available on the actual host.
Role Variables