LocalNet: add DNS over TLS exception

Test: TreeHugger
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ie780a191002f17a8b2b049271bd6c48d9af4c4fd
This commit is contained in:
Maciej Żenczykowski 2025-03-19 21:14:24 -07:00
commit f236e862a9

View file

@ -10063,6 +10063,8 @@ public class ConnectivityService extends IConnectivityManager.Stub {
IPPROTO_UDP, 53, true);
mBpfNetMaps.addLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer,
IPPROTO_TCP, 53, true);
mBpfNetMaps.addLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer,
IPPROTO_TCP, 853, true); // DNS over TLS
}
}
}
@ -10085,6 +10087,8 @@ public class ConnectivityService extends IConnectivityManager.Stub {
IPPROTO_UDP, 53);
mBpfNetMaps.removeLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer,
IPPROTO_TCP, 53);
mBpfNetMaps.removeLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer,
IPPROTO_TCP, 853); // DNS over TLS
}
}
}