Repository navigation

Harden DNS proxy lifecycles and add outbound interface binding - #214

Open

aarond10 wants to merge 9 commits into

review/dns-proxy-hardening

Commits on Sep 27, 2026
- dns_tcp: prevent frame length overflow
  aarond10
  committed
  2f6ce62
- https_client: bound in-flight requests
  aarond10
  committed
  df0de9f
- options: drop to user's primary group
  aarond10
  committed
  f6110d0
Commits on Oct 1, 2026
- doh_proxy: detect newly added resolver addresses
  aarond10
  committed
  eb91b8b
Commits on Oct 5, 2026
- dns_tcp: queue responses without blocking
  aarond10
  committed
  60b7f37
- doh_proxy: retain resolve list through client reset
  aarond10
  committed
  a97bc95
- https_client: allocate socket watchers on demand
  aarond10
  committed
  f59deef
- Bind HTTPS and bootstrap DNS sockets to an outbound interface
  aarond10
  committed
  5c10207
- options: avoid implicit group reset for non-root startup
  aarond10
  committed
  c574e4b