Skip to content

[pull] master from home-assistant:master - #415

Merged
pull[bot] merged 1 commit into
moovy2:masterfrom
home-assistant:master
Aug 28, 2026
Merged

pull[bot] merged 1 commit into
moovy2:masterfrom
home-assistant:master

Conversation

@pull

@pull pull Bot commented Aug 28, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

…ces (#4794)

* openthread_border_router: Fix upstream DNS resolution for Thread devices

Since add-on 2.12.0 (OTBR bump to b041fa52, which pulled in OpenThread
d88b63d19 / openthread/openthread#10864) the upstream DNS resolver
binds its UDP sockets to the infrastructure interface via
SO_BINDTODEVICE. The add-on runs with host networking, and the
nameserver in /etc/resolv.conf is the Supervisor DNS (172.30.32.3),
which is only reachable through the hassio bridge. With the socket
bound, the kernel routes the query out the physical interface via the
default route instead, where it goes unanswered: upstream DNS queries
from Thread devices, and with them NAT64/DNS64 name resolution (device
cloud connectivity, MQTT broker hostnames, ...), time out.

Disable the binding via
OPENTHREAD_POSIX_CONFIG_UPSTREAM_DNS_BIND_TO_INFRA_NETIF in the
project config header so upstream queries follow the host routing
table again, as they did before 2.12.0. A behavioral fix has been
proposed upstream (openthread/openthread#13545); this define can be
dropped once it is merged and picked up.

Notes from debugging, for future reference:

- Networks whose router advertises RDNSS in router advertisements are
  NOT affected on recent add-on versions: since OpenThread #11342
  (March 2025) the resolver also queries RDNSS-discovered servers,
  which are on-link on the infrastructure interface and work despite
  the binding. This masked the regression and made it appear
  environment-dependent. IPv4-only networks (no RDNSS) are always
  affected.
- `ot-ctl dns resolve4` on the border router itself is not a valid
  test for this path: in our testing such queries never reached the
  BR's own DNS-SD server, independent of this bug. Test from an
  actual Thread device (or a TREL-connected OpenThread CLI node).

Fixes #3947

* Update openthread_border_router/CHANGELOG.md

Co-authored-by: Jan Čermák <sairon@users.noreply.github.com>

---------

Co-authored-by: Jan Čermák <sairon@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Aug 28, 2026
@pull pull Bot added the ⤵️ pull label Aug 28, 2026
@pull
pull Bot merged commit 1941dc2 into moovy2:master Aug 28, 2026
1 check failed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant