WIP: dns: start aardvark-dns on a different port

hardcode port 1153 and assume aardvark-dns is always started for now Signed-off-by: Dominique Martinet <[email protected]> Fixes: containers/aardvark-dns#13
martinetd · Jul 1, 2022 · ee7b0de · ee7b0de
1 parent 0a97413
commit ee7b0de
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/src/dns/aardvark.rs b/src/dns/aardvark.rs
@@ -95,7 +95,7 @@ impl Aardvark {
             "--config",
             &self.config,
             "-p",
-            "53",
+            "1153",
             "run",
         ]);
 

diff --git a/src/firewall/varktables/types.rs b/src/firewall/varktables/types.rs
@@ -344,6 +344,18 @@ pub fn get_port_forwarding_chains<'a>(
         netavark_hashed_dn_chain.create = true;
     }
 
+    // Create redirection for aardvark-dns on non-standard port
+    if let Some(gateway) = network_address.gateway {
+        netavark_hostport_dn_chain.create = true;
+        netavark_hostport_dn_chain.build_rule(VarkRule::new(
+            format!(
+                "-j {} -d {} -p {} --dport {} --to-destination {}:{} {}",
+                DNAT, gateway, "udp", 53, gateway, 1153, comment_dn_network_cid
+            ),
+            None,
+        ));
+    }
+
     for i in pfwd.port_mappings.clone() {
         if let Ok(ip) = i.host_ip.parse::<IpAddr>() {
             match ip {