mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-10-18 21:16:47 +00:00
Maurice
31239f3687
The guard resolved a name to one address and pinned the socket to it. On a dual-stack name whose AAAA came first that was an IPv6 many hosts cannot reach on 443, and the request sat until the caller's timeout while the A record would have answered at once. OIDC discovery, Dawarich, AirTrail, the photo providers, a self-hosted router or Nominatim and the model endpoints all ride this path. The name is now resolved to every address it has, each one is checked, and one blocked address blocks the name. The whole checked list goes to the socket, IPv4 ahead of IPv6, where Node walks it itself and moves on after its attempt timeout. Redirect hops do the same per hop. A caller that still names one address gets exactly the old behaviour.