From f236e862a990cd6485a613ab49feed5a0c6a68a3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maciej=20=C5=BBenczykowski?= Date: Wed, 19 Mar 2025 21:14:24 -0700 Subject: [PATCH] LocalNet: add DNS over TLS exception MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Test: TreeHugger Signed-off-by: Maciej Żenczykowski Change-Id: Ie780a191002f17a8b2b049271bd6c48d9af4c4fd --- service/src/com/android/server/ConnectivityService.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/service/src/com/android/server/ConnectivityService.java b/service/src/com/android/server/ConnectivityService.java index e27b72d2ce..ef6a38ab6e 100644 --- a/service/src/com/android/server/ConnectivityService.java +++ b/service/src/com/android/server/ConnectivityService.java @@ -10063,6 +10063,8 @@ public class ConnectivityService extends IConnectivityManager.Stub { IPPROTO_UDP, 53, true); mBpfNetMaps.addLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer, IPPROTO_TCP, 53, true); + mBpfNetMaps.addLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer, + IPPROTO_TCP, 853, true); // DNS over TLS } } } @@ -10085,6 +10087,8 @@ public class ConnectivityService extends IConnectivityManager.Stub { IPPROTO_UDP, 53); mBpfNetMaps.removeLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer, IPPROTO_TCP, 53); + mBpfNetMaps.removeLocalNetAccess(getIpv4MappedAddressBitLen(), iface, dnsServer, + IPPROTO_TCP, 853); // DNS over TLS } } }