comment on bind-dynamic vs bind-interfaces

Author: lmagyar

tailscale/rootfs/etc/s6-overlay/s6-rc.d/magicdns-egress-proxy/run

@@ -56,6 +56,9 @@ options+=(--log-facility='-')
 options+=(--cache-size=0)
 
 options+=(--listen-address="${DNSMASQ_EGRESS_ADDRESS_IPV4}")
+# on the lo interface this bind-interfaces option has the effect that dnsmasq connects only to the specified address
+# and on the lo interface bind-interfaces option doesn't result in a logged warning
+# this is intentionally different from the ingress proxy, where on a non-lo interface bind-dynamic option has the same effect
 options+=(--bind-interfaces)
 options+=(--port="${dnsmasq_egress_port}")
 

tailscale/rootfs/etc/s6-overlay/s6-rc.d/magicdns-ingress-proxy/run

@@ -63,6 +63,9 @@ if bashio::var.has_value "${tailscale_address_ipv6-}"; then
   options+=(--listen-address=${tailscale_address_ipv6})
 fi
 
+# on a non-lo interface this bind-dynamic option has the effect that dnsmasq connects only to the specified address
+# this is intentionally different from the egress proxy, where on the lo interface bind-interfaces option has the same effect
+# and on the lo interface bind-interfaces option doesn't result in a logged warning
 options+=(--bind-dynamic)
 options+=(--port=${dnsmasq_ingress_port})