feat: add VPN DNS service with dynamic service catalog resolution and CoreDNS integration

Add ServiceDNSRecord type and gateway API endpoint to expose active service domain-to-IP mappings. Implement ListServiceDNSRecords repository method querying services table with proxy_ip resolution using effectiveAccessProxyIP helper.

Add vpn-dns microservice built on CoreDNS with periodic sync from backend API. Generate Corefile with configurable upstream DNS servers and hosts plugin for service overrides.
This commit is contained in:
2026-03-18 13:30:34 +01:00
parent 6cf49ff3e0
commit 3e2169f217
11 changed files with 238 additions and 1 deletions

View File

@@ -27,3 +27,7 @@ NEXAVPN_BACKEND_HOST=127.0.0.1
NEXAVPN_ACCESS_PROXY_IP=172.16.0.120
NEXAVPN_ACCESS_PROXY_HTTP_ADDR=172.16.0.120:80
NEXAVPN_ACCESS_PROXY_HTTPS_ADDR=172.16.0.120:443
NEXAVPN_DNS_SYNC_URL=http://127.0.0.1:8080/api/v1/gateway-agent/dns/services
NEXAVPN_VPN_DNS_ADDR=:53
NEXAVPN_VPN_DNS_UPSTREAMS=172.16.0.100,172.16.0.105
NEXAVPN_CLIENT_DNS_SERVERS=172.16.0.119