Repository navigation
T30 — Steer credentialed names to the proxy and fail closed while it is down #2281
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| DNS steering fails closed | M | needs care | standard | an agent | 400 (280 code, 120 tests) |
With the proxy stopped, a dns-steered box resolving github.com gets SERVFAIL, never a real address.
Covers:
- BEP-062
- BEP-078
Layers:
- dns:
- crates/minimald/src/net/dns_gate.rs: steered names answer the proxy's address; SERVFAIL while it is down; NODATA for AAAA, HTTPS, SVCB
- crates/minimald/src/net/dns.rs: carries the proxy's listener state to the gate
cargo nextest run -p minimald steered_name_servfail_while_proxy_downcargo nextest run -p minimald steered_name_aaaa_https_svcb_are_nodata
Waits on:
Plan block
### T30 — Steer credentialed names to the proxy and fail closed while it is down
slice: S4
kind: task
covers: BEP-062, BEP-078
size: M
est: 280 code, 120 tests
executor: agent
difficulty: needs care
model: standard
diagnostics: the bundle's daemon log tail carries each SERVFAIL answered for a steered name while the proxy was down, with the name and the box
observability: one rate-limited warn log line per steered name answered SERVFAIL, and one info line when the proxy's listener comes back
layers:
- dns:
- crates/minimald/src/net/dns_gate.rs: steered names answer the proxy's address; SERVFAIL while it is down; NODATA for AAAA, HTTPS, SVCB
- crates/minimald/src/net/dns.rs: carries the proxy's listener state to the gate
test: cargo nextest run -p minimald steered_name_servfail_while_proxy_down
test: cargo nextest run -p minimald steered_name_aaaa_https_svcb_are_nodata
produces: none
consumes: none
proof: With the proxy stopped, a dns-steered box resolving github.com gets SERVFAIL, never a real address.
depends on:
- blocked by #2276
Reacted by minimal-foundry
Activity
minimal-foundry commentedon Oct 24, 2026
Done. #2519 merged.
branch
agent/2281-steer-credentialed-names-to-the-proxy-and-fail-c· epic #1501 · PR #2519014b3a94a32b99d0Updated 2026-10-25T03:54:25.663Z.