Nick Khyl 1ec348784b ipn/ipnlocal,net/dns/resolver: prevent bare name resolution when MagicDNS is disabled ...

nodeBackend.nodeByName should always contain both FQDNs and short names,
as it is used in different contexts, including UserDial DNS resolution, which should
be able to resolve unqualified DNS names regardless of the MagicDNS state.

However, net/dns/resolver.Resolver and, by extension, MagicDNSHosts
implementations should only resolve fully qualified domain names,
skipping short names when MagicDNS is disabled for the tailnet.

This fixes it in (*nodeBackend).nodeByFQDNLocked, which is only used
in the MagicDNS paths, and updates the tests.

Fixes #20789

Signed-off-by: Nick Khyl <nickk@tailscale.com>

2026-08-10 17:54:32 -05:00

..

debug.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

doh_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

forwarder_test.go

net/dns/resolver: reach netstack-only upstreams over UDP (#20786)

2026-08-09 09:01:45 -07:00

forwarder.go

net/dns/resolver: reach netstack-only upstreams over UDP (#20786)

2026-08-09 09:01:45 -07:00

macios_ext.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

tsdns_server_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

tsdns_test.go

net/dns/resolver: bound negative caching with SOA records, lower positive TTL

2026-07-28 11:52:50 -07:00

tsdns.go

ipn/ipnlocal,net/dns/resolver: prevent bare name resolution when MagicDNS is disabled

2026-08-10 17:54:32 -05:00