jackos1998
0bd08c4a91
CI / Check, build and cache nixfiles (push) Successful in 46m1s
The routers' IPv6 default route runs over the as211024 mesh as a proto-static route that blackholes rather than withdrawing when the mesh flaps (e.g. during ipsec churn on a deploy). With "::" in the recursor's outgoing.source_address, pdns-recursor kept selecting IPv6 to reach authoritative servers, stalled on timeouts, and took recursion down with it whenever the mesh bounced. Drop "::" so upstream recursion goes out the WAN over IPv4 and stays up; AAAA records are still served fine. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>