Skip to content

dns/bind: add SVCB record type support#5508

Merged
Monviech merged 1 commit into
opnsense:masterfrom
mbedworth:bind-svcb-record-type
Jun 22, 2026
Merged

dns/bind: add SVCB record type support#5508
Monviech merged 1 commit into
opnsense:masterfrom
mbedworth:bind-svcb-record-type

Conversation

@mbedworth

Copy link
Copy Markdown
Contributor

Adds SVCB to the BIND plugin's record-type options so RFC 9460/9461 SVCB records can be created via the GUI/API.

Describe the problem

The plugin's record model rejected the SVCB type before it reached named, so SVCB records (notably _dns records for Discovery of Designated Resolvers, RFC 9461) couldn't be created. BIND 9.18+ supports SVCB natively.

Describe the proposed solution

One-line addition of SVCB to the Record.xml OptionValues (alphabetically between SSHFP and TLSA). No template changes needed — named renders SVCB rdata directly.

This complements #5425 (HTTPS record type); HTTPS is the HTTPS-specific form of SVCB, this adds the general SVCB type. Scoped to this single change.

Adds SVCB to the Record model OptionValues so RFC 9460/9461 SVCB records
(e.g. _dns DDR records for encrypted-DNS discovery) can be created via the
plugin GUI/API. BIND 9.18+ supports SVCB natively; the plugin validation
rejected the type before it reached named. One-line change, complements the
HTTPS record type (opnsense#5425).

@mimugmail mimugmail left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Never used this, ok, thx

@Monviech Monviech merged commit 02e84fb into opnsense:master Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants