Client DNS doesn't resolve when using VIP in place of interface IP

[johnpoz]

@jimp said in Client DNS doesn't resolve when using VIP in place of interface IP:

ou want to intercept local client DNS over TLS queries (and hope they don't validate the hostname...)

That one makes the most sense to me ;) I could see wanting to do that for sure - for all of these devices that might be trying to sneak dns over dot or doh..

Thanks Jim - those 3 are all valid.. First one I don't see, unless you were wanting to offer your guest clients a way to use your dns, and don't provide other protection from other clients on your wifi, ie your wifi is completely unencrypted..

[jimp]

@johnpoz said in Client DNS doesn't resolve when using VIP in place of interface IP:

First one I don't see, unless you were wanting to offer your guest clients a way to use your dns, and don't provide other protection from other clients on your wifi, ie your wifi is completely unencrypted..

It's more about business cases here (hospitality like hotels, coffee shops, etc) which have to cater to the lowest common denominator clients.