[Openvpn-devel,v2] DNS server documentation update
Commit Message
From: Selva Nair <selva.nair@gmail.com>
Change-Id: I53b3f4c60897a1f4dd5efeb6575d525ffb082402
Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1646
---
This change was reviewed on Gerrit and approved by at least one
developer. I request to merge it to master.
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1646
This mail reflects revision 2 of this Change.
Acked-by according to Gerrit (reflected above):
Frank Lichtenheld <frank@lichtenheld.com>
Comments
Thanks, this is a very welcome addition / clarification (and for whatever
reason, it tends to get stuck somewhere).
Your patch has been applied to the master and release/2.7 branch (docs).
commit c77d3e90d9d97e5447d35b545f9c8f07bf4c8ce3 (master)
commit f50d2e140beaca82dc6f842f8761606279e0218f (release/2.7)
Author: Selva Nair
Date: Thu Apr 30 18:32:43 2026 +0200
DNS server documentation update
Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1646
Message-Id: <20260430163249.13638-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg36816.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
--
kind regards,
Gert Doering
@@ -216,7 +216,8 @@
DNS server options it must be between 0 and 127. The server id is used
to group options and also for ordering the list of configured DNS servers;
lower numbers come first. DNS servers being pushed to a client replace
- already configured DNS servers with the same server id.
+ already configured DNS servers with the same server id. Only the group of
+ options corresponding to the lowest server id is applied.
The ``address`` option configures the IPv4 and / or IPv6 address(es) of
the DNS server. Up to eight addresses can be specified per DNS server.
@@ -249,6 +250,19 @@
so that ``--dns`` overrides ``--dhcp-option``. Thus, ``--dns`` can be used today
to migrate from ``--dhcp-option``.
+ Windows only:
+
+ #. If tap-windows6 is in use, dns servers are set by DHCP by default.
+ In this case only ``--dns search-domains`` and ``--dns server n address ..``
+ with the lowest value of ``n`` are interpreted. All other ``--dns`` options
+ are ignored. Use of the dco driver is the recommended way to make use of these
+ new features.
+
+ #. If ``--dns server n resolve-domains`` is in use, the DNS server addresses
+ corresponding to ``n`` are set on the interface only if ``search-domains`` is
+ also specified. Otherwise these DNS addresses are used only for NRPT rules for
+ split-DNS.
+
--explicit-exit-notify n
In UDP client mode or point-to-point mode, send server/peer an exit
notification if tunnel is restarted or OpenVPN process is exited. In